Appendix II. Configuring a Windows User Account to Run the TLC Manager Service

To configure a new Windows user account to run the TLC Manager service, complete the following steps:

1. Add the "Log on as a service" right to the account: 

https://technet.microsoft.com/en-us/library/cc794944(v=ws.10).aspx

2. Grant the user account read/write access to the following directories:

The TLC Manager installation directory

The Audit Logger File Store directory specified in the Audit Logger Settings dialog of the TLC Manager Configuration Wizard (see Step 2. Configuring TLC Manager).

%PROGRAMDATA%\Tripwire

3. Add read access to the private key of the Manager host system:

https://technet.microsoft.com/es-es/library/ee662329(v=vs.85).aspx

4. Add the following name spaces to the user account:

https://+:8091/TLC/

https://+:8091/LogManagerData/

For example: 

netsh http add urlacl url=https://+:8091/TLC/ user=<user>

Where <user> is the name of the Windows user account.

For more information, see: 

https://msdn.microsoft.com/en-us/library/windows/desktop/cc307223(v=vs.85).aspx