Creating Watch Folder Impersonation Accounts
Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista
By default, a watch folder's job manager will run tasks under the user account that's also used by the IIS Transform Manager Host service to log on. You can configure a watch folder to impersonate an account, and the job manager will run using the security context of that account. These accounts can be least-privileged accounts that have the minimum permissions required to access the resources that are required by tasks. For example, to access media files on an enterprise network for transcoding or to store the transcoded output to a network location, the user account must have the necessary permissions to those locations on the network.
To create watch folder impersonation credentials
In the Connections pane, click Watch Folders.
In the Actions pane, click Manage Credentials.
In the Manage Credentials dialog box, click Add.
In the Add Credentials dialog box, in Friendly name, type a name that will be used to identify the user account so that you can select it when you configure a watch folder.
Specify the credentials (User name and Password) of the user account. You can enter the user name in the following formats:
Domain\User if access to enterprise network resources is required.
.\User or User if all required resources are on the local computer.
In the Add Credentials dialog box, click OK.
In the Manage Credentials dialog box, click Close.
Note
If you reset the password for the user account that the watch folder impersonates, the user account will be removed from the credential store for the account and you won't be able to start the watch folder. Use the procedure in this section to update the password of the user account that the watch folder impersonates, and then start the watch folder.