Configuring the Transform Manager Service

Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista

IIS Transform Manager features are available in Internet Information Services (IIS) Manager only after you configure and then start the Transform Manager Service in IIS Manager. You must specify a user account that the IIS Transform Manager Host service can use to log on. The user account that you specify must have appropriate rights in order to be able to access resources that are needed by IIS Transform Manager. For example, the account must be able to copy media files or write to log files in Transform Manager watch folder configuration folders, or run executable programs as tasks.

The credentials that you specify can be for an account that's a member of the Administrators group on the local computer. However, it's recommended that you create a new user account with privileges that limit access to resources required by Transform Manager. This least-privileged user account must have the following user rights:

• Generate security audits

• Impersonate a client after authentication

• Log on as a batch job

• Log on as a service

To configure the IIS Transform Manager service

1. Start IIS Manager (click Start > Administrative Tools > Internet Information Services (IIS) Manager).

2. In IIS Manager, in the Connections pane, click Transform Manager.

3. If Transform Manager is running, in the Actions pane, click Stop Transform Manager Service.

4. In the Actions pane, click Set Credentials.

5. In the Set Credentials dialog box, enter the credentials (User name and Password) of a user account that the IIS Transform Manager Host service can use to log on. You can enter the user name in the following formats:

   • Domain\User for domain user accounts.

   • .\User or User for local user accounts.

6. If the account is a least-privileged user account, assign the required user rights to the account by doing the following:

   1. Open the Microsoft Management Console (MMC) Local Security Policy snap-in (click Start, click Run, type secpol.msc in the Run dialog box, and then click OK).

   2. In the navigation pane, expand Local Policies, and then click User Rights Assignment.

   3. In the console pane, right-click the Generate security audits policy, and then click Properties.

   4. In the Properties page, click Add User or Group.

   5. In the Select Users, Computers, Service Accounts, or Groups dialog box, click Object Types, make sure that Users is selected, and then click OK.

   6. In the Select Users, Computers, Service Accounts, or Groups dialog box, in Enter the object names to select, type the user name of the user account, and then click OK.

   7. Close the Properties page.

   8. Repeat steps [c] through [g] for the remaining policies.

   9. Close the Local Security Policy dialog box.

7. Click OK to close the Set Credentials dialog box.

8. Start the Transform Manager service (in IIS Manager, in the Actions pane, click Start Transform Manager Service).

See Also

Concepts

Creating Watch Folder Impersonation Accounts