Create a service account for PI Vision

Note: This section doesn't apply if installing in an environment whose end users only use OpenID Connect authentication and you plan to select the authentication option OpenID Connect with Process Identity Client ID for the PI Vision Connection to PI Data Archive and AF Servers in the security settings. (This is the only valid option if your PI Vision server is not installed on a domain.) In that case, proceed to Run the installation kit.

By default, the AVEVA PI Vision application runs under the machine account of the application server itself. Instead, we recommend that you create a dedicated service account (domain account) for the AVEVA PI Vision application service. Create this account on the domain controller with Active Directory Users and Computers.

Note: In most organizations, the procedures in this step are performed by an IT professional. For more information, see the Microsoft article Create a New User Account.

1. On the domain controller, open Active Directory Users and Computers.

2. Right-click the Users folder, and then select New > User to open the New Object - User window.

3. Enter the name of your account and select Next.

   We recommend that you name the service account PIVisionService. You can enter Vision as the first name, Service as the last name, and PIVisionService as the user logon name.

4. Enter the account password and select User cannot change password and Password never expires check boxes.

   Make a note of the account name and password as you will need it during installation. After installation, you will configure the AVEVA PI Vision application pools and services to run under this new account. For more information, see Configure PI Vision application pools to use the PI Vision service account.

5. Select Next.

6. Grant the new service account permissions per the next section.