Audience

This article is recommended for users who are installing Crystal Delivery Pro on a corporate or academic domain. 

Configure Crystal Delivery Service with a Computer Account

When Crystal Delivery Pro is installed on a domain server or domain computer, it is recommended that a Group Managed Service Account (gMSA) be provisioned for the Crystal Delivery Service.  This will allow the service to run reliably and securely with the correct permissions.

Option B - Computer Account is no longer recommended for the following reason: When you use a computer account, you can't determine which service on the computer is using that account. Consequently, you can't audit which service is making changes.4

If this is not a concern for you, the instructions below are the deployment steps for using a computer account for the Crystal Delivery Service.

The instructions below are intended for IT Administrators to follow.  Simply link them to this article.

Instructions

Part 1 of 3 - Configure File Share Permissions - Sharing Tab

1. Right-click on File Share > click Properties
2. Click Advanced Sharing button
3. Click Permissions button
4. Click Add button
5. Click Object Types button > check Computers > click OK button
6. Enter YOURCOMPUTER$ > click Check Name button > click OK button
7. With YOURCOMPUTER$ selected > ensure Change and Read Allow Permissions are checked
8. Click Apply button > click OK button
9. Click Apply button again > click OK button
10. Click Security Tab and proceed to Part 2 below.
11. NOTE:  You may not need to do this step if your computer is part of an existing group such as Everyone or Authenticated Users.  You must ensure that both the Change and Read permissions are checked for Allow

Part 2 of 3 - Configure File Share Permissions - Security Tab

1. Within the file share properties Security Tab, click Edit button
2. Click Add button
3. Click Object Types button > check Computers > click OK button
4. Enter YOURCOMPUTER$ > click Check Name button > click OK button
5. With YOURCOMPUTER$ selected > ensure both Modify and Write Allow Permissions are checked. (They will both be unchecked right after adding the computer name).
6. Click Apply button > click OK button
7. Click Apply button > click OK button
8. Proceed to Part 3 below

Part 3 of 3 - Confirm Crystal Delivery Service - Log On is Local System

1. Click Start > Type services.msc > Press enter to run.
2. Locate Crystal Delivery Service in the list of services
3. Right-click Crystal Delivery Service > click Properties
4. Click Log On Tab
5. Ensure Local System account is selected
6. Note:  If the Log On Tab is grayed out, you may need to work with your local IT Administrator reinstall the service.