Select a Service account for the PI buffering service

The Virtual Service account (NT Service\pibufss) which is a local account that requires no password management, and accesses the network with the computer's identity. Unlike the Local System and Network Service accounts, this account is not shared between services.

The Windows Domain user account is an account that will provide a unique identity for pibufss both on the machine and when accessing the network.

By default, pibufss will connect with Windows Authentication first and Trust second. When there is a mapping for the service account on the Data Archive, the mapping will dictate which points the userswill be able to write to.

Note: A managed service account is the best solution for pibufss. It is similar to the Virtual Service Account in there's no password management, but unlike the Virtual Service Account, it gives pibufss it's own identity when accessing the network. A managed service account does require someone from IT to configure this account.

For more information about security and PI Buffer Subsystem, refer to the information about buffering under PI Server (versions 2014 R2 and later) on PI Live Library, or to the Buffering User Guide released with PI System 2015.

Tip: To display the Windows Security pane, go to the PI Data Archive Security pane and click the Change link next to Windows account to run the PI Buffering service. (You will see the PI Data Archive Security pane when you use Buffering Manager to add a server, install PI Buffer Subsystem, or upgrade from API Buffer Server.)

1. Take one of the following steps:

   To:	Do this:
   Use Windows Account (recommended)	Select Use Windows Account (recommended). In the Windows user box, enter the username using this format: DOMAIN\username Note: You can also click the ellipsis button to browse for an account, or to check the account after entering it. In the Password box, enter the password.
   Use Virtual Service Account	Select Use Virtual Service Account (NT Service\Pibufss).

   The PI Buffer Subsystem service is configured to run using the specified account. If you used a Windows account, that account is added to the local Administrators group to ensure that it has the required permissions.

2. Click Next.