How to Configure EPG Service / EPG Monitor to use a non-admin service account

This article applies to the following products:

• Messageware EPG 2019
• Messageware EPG 2016
• Messageware EPG 2013

SUMMARY

This article outlines the steps required to assign a non-admin mailbox account to be assigned as the EPG service.

RESOLUTION

Verify the intended AD user account is assigned with an on-prem mailbox.

Connect with your browser to the EPG Admin page

• Example: https://serverName/epg-admin
• Navigate to Alerts & Digests > Config: Sender Type (UPN or Service Account) > select service account

• Under Service Account Email Sender > enter the service account email address
• Once information is entered > click Save

Navigate to the server where EPG Service / EPG Monitor is installed

Registry Permissions

1. Launch the Registry Editor
2. Navigate to the following location
   • HKEY_LOCAL_MACHINE\SOFTWARE\Messageware
3. Right-click on the Messageware key
   • Select permissions
   • Click on Locations and select the organization's domain
   • Type the user account and click Check Names (This is the same name used in EPG Service Account on the EPG-Admin)
4. Place check-mark on Full Control to the AD account

Folder Permissions

EPG Program Folder

1. Launch File Exporer
2. Navigate to
   • \Program Files
3. Right-click on the Messageware folder and select properties
4. Select the Security tab and click Edit button
   • Click on Add button
   • Click on Locations and select the organization's domain
   • Type the user account and click Check Names (This is the same name used in EPG Service Account on the EPG-Admin)
5. Place check-mark on Full Control under Allow column on the AD account

IIS Config Folder

1. Navigate to %WINDIR%\System32\inetsrv\config folder
2. Give Read permissions to the Service Account being used

IIS MachineKey Permissions

1.  Open elevated command prompt
2. Change directory to C:\Windows\Microsoft.NET\Framework\v4.0.30319
3. Run the following command
   • aspnet_regiis -pa "NetFrameworkConfigurationKey" "Domain\USER"
   • the user account here will be the service account

Windows Services Manager

1. Launch the Windows Services Manager
2. Locate Messageware EPG Monitor Service (if installed in non-Exchange server)
   • Messageware EPG Service (if installed in Exchange Server)
   • 
3. Launch the Windows Services Manager
4. Locate Messageware EPG Monitor Service (if installed in non-Exchange server)
5. Right-click on the service and select the Log on tab
   • Click on This and Browse button
   • Click on Locations and select the organization's domain
   • Type the user account and click Check Names (this is the same name used in EPG Service Account on the EPG-Admin)
   • Once verified, click OK
   • Restart the EPG Monitor/Service for changes to apply 

Verify Service Account Configuration

1. Launch the Event Viewer and select Applications
   • Search for Messageware EPG Service (latest update/refresh)
   • Verify entries successfully initialize as expected
   • 
2. To perform an EPG email alert test, return to the EPG Admin page and navigate to Alerts section
   • Edit Send a Test Alert and click Update to commit the change
   • Click Save at the top of the page
3. Restart the EPG Monitor/Service to queue up the email request to send the Test Alert Identifier to the email recipient that was entered in the Alerts page