Question & Answer
Question
Is it possible to use the IBM SPSS Modeler Server service in Windows with an account that is not the default SYSTEM account?
Cause
After starting the Modeler Server service with the new account (called 'spss'), connecting Modeler Client to Modeler Server produces the following error:
"Failed to connect to server <domain>\<user>@<hostname>:28052
IBM SPSS Modeler Server
Connection to the server refused. Please check the following:
1) That Server is running
2) That any firewalls have been correctly configured
3) That port specifications for the Server are sufficient
4) That the max_sessions option for the Server is high enough
5) If Server is running on a Microsoft Windows based platform and you connect by single-sign on, verify that the user account has been added into the administrator group on the Server machine"
All the above items have been checked and are configured correctly to allow connection between Modeler Client and Server. Starting the Modeler Server service as 'SYSTEM' does not produce any error. What needs to be configured on the 'spss' account to allow this functionality?
"Failed to connect to server <domain>\<user>@<hostname>:28052
IBM SPSS Modeler Server
Connection to the server refused. Please check the following:
1) That Server is running
2) That any firewalls have been correctly configured
3) That port specifications for the Server are sufficient
4) That the max_sessions option for the Server is high enough
5) If Server is running on a Microsoft Windows based platform and you connect by single-sign on, verify that the user account has been added into the administrator group on the Server machine"
All the above items have been checked and are configured correctly to allow connection between Modeler Client and Server. Starting the Modeler Server service as 'SYSTEM' does not produce any error. What needs to be configured on the 'spss' account to allow this functionality?
Answer
Starting SPSS Modeler Server service using a different account than SYSTEM is possible, but you will need to configure the account with the necessary Local Security Policies in order to be successful.
In the above example, ensure that the 'spss' account has the following policies granted to it:
* Create a token object
* Replace a process level token
* Log on as a service
In the above example, ensure that the 'spss' account has the following policies granted to it:
* Create a token object
* Replace a process level token
* Log on as a service
* Adjust memory quotas for a process
These policies are changed through Control Panel > Administrative Tools > Local Security Policy > Security Settings > Local Policies > User Rights Assignment
Also remember that end-users connecting to Modeler Server must have the policy 'Allow log on locally' granted to them.
These policies are changed through Control Panel > Administrative Tools > Local Security Policy > Security Settings > Local Policies > User Rights Assignment
Also remember that end-users connecting to Modeler Server must have the policy 'Allow log on locally' granted to them.
This is covered in Technote 419131 (below) and in the 'ServerInstallationWindows.pdf' documentation of IBM SPSS Modeler Server.
Related Information
[{"Product":{"code":"SS3RA7","label":"IBM SPSS Modeler"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Modeler","Platform":[{"code":"PF033","label":"Windows"}],"Version":"Not Applicable","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]
Was this topic helpful?
Document Information
Modified date:
31 March 2021
UID
swg21636156