CADWORKER not able to create directory during publishing process

Ben,

Windows permissions are always fun. It it isnot absolutely necessary to run both Windchill and the Daemon services as the same user. However, it greatly simplifies the permissions configuration when you do.

Ramanathan is explaining a recommended system administration practice. It is not a good practice to run Windchill relates services as the local system account for a few reasons.

• 
  
• JConsole or VisualVM cannot 'see' the Servlet Engine or Server Manager Javaprocesses when Windchill is running as Windows services using the local system account. If you use a different account these toolscan 'see' the Java processes. Granted you can work around this by calling out JConsole or VisualVM from the command line (Windchill shell).
• 
  
• Windchill connects to the publish temp folder using the credentials associated with the Windows service. So you must grant permissions for the \\<windchill< a="> app server>\SYSTEM account to read/write to the publish temp folder on the CAD Worker. I don't know how to do this. If you used a domain 'Windchill service' account to run the services on both the CAD Worker and the Windchill server then you just have to grant the Windchill service account read-write permissions on your publish temp folder.
• 
  
• Using the Windchill service domain account across all servers in the Windchill configuration minimizes the number of usernames and passwords you have to remember to administer Windchill. Configure the Windows services to run as this account. Grant this account log on as service rights and use it for all cross-serverfolder mappings.
• 
  

I understand you are in a secure environment and setting up a Windchill service account may not be permissible or possible according to your security policies. (I'm not sure if your secure network has the ability to set up domain accounts.)

• 
  
• You can try creating your publish temp folder on your CAD Worker machine through Windows Explorerfrom your Windchill aplication server.That means you must have an account on the CAD Worker that you can use from the Windchill server. The creator of this folder is automatically granted full permissions to the folder. This approachmay work in Windows 2008 R2 and Windows 7.
• 
  
• If you must have different accounts on the machines, configure the Windows services to run as the necessary accounts and then grant both user accounts read-write permissions to the publish temp folder.
• 
  
• Carsten's suggestion of using FTP is a viable alternative and will get you around not having a domain account. You can install an FTP server on your CAD Worker and configure the CAD Agent to use the FTP service.
• 
  

Hope this helps.

Kind Regards,

Matt

In Reply to Ben Loosli:

With Windows 2003 and WinXP CAD worker, we have never run them in the same name. The Windchill server services use the Local SYSTEM account for all Windchill, Apache, Tomcat and WindchillDS logons. The CAD Worker uses a dedicated SYSPDMAPP account. This has worked for years. When I try to switch the Windchill server to use the SYSPDMAPP account, the processes fail to start.

Now with Win7 CAD Worker, I can no longer create the directory.

Something is missing!

Thank you,

Ben H. Loosli
USEC, INC.