Use virtual account for InTouch Web Client

The Web Client virtual service account has had its privileges reduced to improve security. To continue using the Web Client for an InTouch Application, the InTouch Web Client virtual service account must have read/write access to the InTouch Application Folder. The virtual service account for the InTouch Web Service is called “NT SERVICE\AIGWebServer”.

The InTouch Web Client virtual service account will be granted read/write access to:

• all existing InTouch applications.

• all InTouch applications created/imported via Application Manager

• all InTouch applications found via ‘Find’ operation; only if the users select Yes to the dialog which prompts to grant Web Client virtual account read/write access to the found application.

To manually grant the InTouch Web Client virtual account access to an InTouch application:

1. Navigate to the InTouch Application folder using File Explorer.

2. Right-select the folder and select Properties.

3. In the Properties dialog, under the Security tab, select Edit.

4. In the Group or usernames section, select Add.

   The Select Users, Computers, Service Accounts, or Groups dialog appears.

5. Select Locations.

   The Locations dialog appears.

6. Select the computer name and select OK.

7. In the Enter the object names to select field, enter NT SERVICE\AIGWebServer.

8. Select OK.

9. In the Permissions for Authenticated Users section, under the Allow column, select the check-boxes: Read & execute, List folder contents, Read, and Write.

10. Select OK.

    Note: The InTouch Web Client virtual service account will not be granted access to the application folder in a shared location, that is, if the application path begins with “\\”, such as the path to a file share.