BarTender Services and Permissions
Question
When running each BarTender service, should I use the default Local Account or Specific Account credentials?
Answer
Services That Should Run Under Local System Account
-
Integration Service - Used to manage and run BarTender Integrations.
-
Printer Maestro - Used for network printer management and monitors printer status.
-
BarTender Web Print Service - Used for Print Portal or custom Web application for Internet client-side printing.
-
Seagull License Server/License Service - Used for communication between BarTender clients and the License Server to manage and monitor printer licenses.
More Information
The Integration Service utilizes user impersonation. Essentially, the user account defined in the Integration file will be impersonated and run as the Local System account for these services. When running with the Local System account these services are able to run as if they were a different account.
Services That Need to Be Set and Run Under a Specific Account (If Additional Permissions Are Required)
-
BarTender System Service (by default, Local System Account)
This service is responsible for connecting BarTender with the System Database for any message/print job logging and performing any reprinting using History Explorer/Reprint console.
For this service, you will need to set and choose an account that has enough rights to perform the tasks for that service with the following attributes:
- has local administrator rights
- has domain-level access
- does not change its password
- has access to the system database (if connecting to the system database using Windows Authentication)
BarTender Print Scheduler Service
The BarTender Print Scheduler Service manages BarTender print engines and intelligently assigns jobs to them while maximizing performance and maintaining print order and serialization. It uses a single pool of print engines so that resources are used efficiently. The Print Scheduler Service ensures that:
- Jobs printing to a specific printer will always come out of that printer in the order the requests were received
- When documents contain embedded data that can change, such as serialized counters, they will be bound to a single print engine to ensure that they print in the correct order
The Print Scheduler is set to Local System by default, but there are a few circumstances under which elevating its permissions using a Specific Account is appropriate:
- Accessing labels, databases, and printers over the network when using Print Station
- Accessing network resources using Print Portal (See Troubleshooting Guide: BarTender Print Portal, specifically the section titled Permissions for Normal Operations for more info on this)
- Accessing printers when printing from Integration Builder