Knowledgebase: Usage > Other
Creating Windows standard user with sufficient privileges to run the memoQ server service
Posted by Péter Botta on 02 July 2015 07:23 AM

Creating Windows standard user with sufficient privileges to run the memoQ server service

  1.  Make sure you are logged in to Windows with a user that is added to the Administrators group (i.e. Administrator)
  2. Open the Windows command line and create a standard user (non-administrator), for example: net user mq memo2QnewUser /add (where memo2QnewUser is the password defined for the user mq).
  3.  Open services.msc and select the memoQ server service.
  4.  Right click on it and select Properties.
  5. Go to the Login tab.
  6. Select the This account: option, enter .\mq for username.
  7.  Enter the password.
  8. Confirm the password and click the Apply button, then the OK button. Now the memoQ server service is configured to be run by the user mq
  9. Open regedit and navigate to: Computer\HKEY_LOCAL_MACHINE\Software\Kilgray\ (or Computer\HKEY_LOCAL_MACHINE\Software\Wow6432Node\Kilgray\ on 64 bit Windows).
  10.  Right-click the Kilgray folder and select Permissions.
  11.   Add the user mq and check the Full control permission check box. Click Apply and then OK.
  12. Give Full control permission for the user mq for the following folders: C:\Program Files\Kilgray\ (or C:\Program Files (x86)\Kilgray\ on 64 bit Windows systems), C:\ProgramData\MemoQ\, C:\ProgramData\MemoQ Server (or C:\Documents and Settings\All Users\Application Data\MemoQ\, C:\Documents and Settings\All Users\Application Data\MemoQ Server\ on Windows XP or Windows Server 2003) and the folder where the resources are stored (if the Support team defined a custom folder during the server installation, i.e.: C:\mq\)Note: You can check this in C:\ProgramData\MemoQ\AppPreferences.xml)
  13. Grant  dbcreator fixed server and db_owner database level roles for user mq: Open Windows command line, and enter the following: sqlcmd –S .\<instancename> (i.e. sqlcmd –S .\MEMOQSERVER) sp_addsrvrolemember ’COMPUTERNAME\mq’, ’dbcreator’ 
  14. GO
  15.  Now the user mq has dbcreator fixed server role.
  16.  Note: You can find out the computer name if you open a new command line and enter the command hostname.
  18.   GO
  19.   sp_addrolemember ’db_owner’, ’COMPUTERNAME\mq’
  20.    GO
  21.   Now the user mq has db_owner database level role.
  22.  Close the Windows command line.
  23. Start the memoQ server service.

Note: It might happen that the current administrator user does not have sufficient rights to run the above SQL statements. In this case the MS SQL Server instance should be run in single user mode:

  •         Enter services.msc in the Search field of the Start menu to open Services.
  •         Stop the appropriate MS SQL Server instance (the one that runs the MemoQServer database)
  •         Open Windows command line.
  •          Navigate to C:\Program Files or go to Program Files (x86)\Microsoft SQLServer\[instancename]\MSSQL\Binn\
i.e: cd C:\Program Files\Microsoft SQL Server\MEMOQSERVER\MSSQL\Binn\
and enter sqlservr.exe –m –s <instancename>, i.e.: sqlservr.exe –m –s MEMOQSERVER

The MS SQL Server instance will start up in single user mode, which means that local Windows Administrators will have the sysadmin fixed server role  on the MS SQL Server (this is the strongest role).

  •           Now open another command line and proceed as described above; you should be able to grant the appropriate roles.
  •         Go back to the single user mode command line and press Ctrl+C and enter y to stop running in single user mode
  •         Start the approriate MS SQL Server instance in services.msc.
  •          Close the command line(s).
  •         Start the memoQ server service.




(0 vote(s))
This article was helpful
This article was not helpful

Comments (0)
Help Desk Software by Kayako