3. Installing and starting Intella Connect as a Windows Service


Important: In order to install Intella Connect as a Windows Service, one must fulfill few preconditions. Please do not proceed with the installation until you read the reminder of this document!

To install Intella Connect as a Windows Service, you will have to:
  • make sure that the account you will be using is properly set up (before installation)
  • make sure that folder structure inside your Windows installation folder has been properly created (after installation)

If you fail in doing any of those two steps, then Intella Connect may not start at all or behave unstable (including making the server machine unresponsive). Please read the reminder of this document carefully before you proceed with the installation.

3.1. Providing valid credentials (during installation)

During installation, on an installer page dedicated to Windows Service installation you will be asked to provide credentials for Windows user account. This is necessary as Intella Connect needs to run in the context of a particular Windows user. Make sure not to have the service installed to log in as LocalService, NetworkService or LocalSystem.

You must first assign the user that is installing Intella Connect the right to “Log on as a Service.” If you are installing Intella Connect on a workstation or member server, you can do this either by configuring the “Local Security Policy” or by creating and configuring a Group Policy Object for that host.

If you are installing Intella Connect on a Domain Controller you can either configure “Domain Controller Security Policy” or create and configure a Group Policy Object. To configure the Local Security Policy which is available under Administrator Tools and expand Local Policies – and click on “User Rights Assignment.” Then select “Log on as a service” and select the user or group for the account that will be doing the installation.

Local Security Policy

To configure a Group Policy Object, go to Computer Configuration – Windows Settings – Security Settings – User Rights Assignment and once again select “Log on as a service.”

User Rights Assignment
Log on as a service

Then select the appropriate user or group.

Log on as a service Properties

Once the “Log on as a service” right has been configured, the assigned user can then install Intella Connect as a Windows Service. In install wizard, during the step outlined below, the login credentials of the user configured with the “Log on as a service” right must be input.

Connect as a Service Installer Step

3.2. Verifying Windows folders structure (after finalizing installation)

While running as a Service few components of Intella Connect need access to special folders in Windows installation directory. If absent those folders should be created during installation of Intella Connect. Regardless, you should make sure that both folders listed below exist and create them yourself if they do not (adjust “C:\Windows” to match your Windows installation folder):
  • C:\Windows\SysWOW64\config\systemprofile\Desktop

  • C:\Windows\System32\config\systemprofile\Desktop


    Hint: It’s best to create those folders using “md” command from terminal ran as Administrator.

Those folders will be used briefly for storing some temporary files and have to exist when the Service is first started.

3.3. Firewall settings for using Intella Connect as a Windows Service on Windows Server operating systems

The firewall on Windows Server operating systems is more restrictive than in desktop Windows operating systems. This will manifest by traffic on loopback network interface (127.0.0.1 or localhost) to be allowed, but any packets incoming to local network interface (from outside of the machine) to be dropped. Thus, using browser on the server to navigate to Intella Connect dashboard, will show the page without any issues, but when using browser on different machine on the network, it will fail to display the dashboard.

To allow incoming traffic on the server:

  1. Open Windows Firewall with Advanced Security.
  2. In the left pane, click Inbound Rules, and then, in the right pane, click New Rule.
  3. In the New Inbound Rule wizard, choose Port Rule Type.
  4. Specify the port on which Intella Connect will be running and follow the instructions of the wizard on the remaining options. If this is the first time that Intella Connect is installed or the port was not changed, then the default port 9999 will be used.

If the port on which Intella Connect is running will be changed at any point later in time, then this firewall rule will need to be updated as well to reflect the port change.

3.4. Intella Connect as a Windows Service running under user account without password

By default, a security setting restricts local accounts that are not password protected to be able to log on only at the physical computer console. The Intella Connect Windows Service will be aborted silently during automatic startup and if attempted to start it manually, it will show following error: Error 1069: The service did not start due to a logon failure.


Important: Computers that are not in physically secure locations should always enforce strong password policies for all local user accounts. Otherwise, anyone with physical access to the computer can log on by using a user account that does not have a password.

To allow Intella Connect Windows Service to run with user account that is not password protected:

  1. Open Local Security Policy.
  2. In the left pane, click Local Policies - Security Options.
  3. Double-click on “Accounts: Limit local account use of blank passwords to console logon only” and choose disabled.

3.5. Manual (un)installation Intella Connect Windows Service

In some situations it’s desirable to install, uninstall or reinstall Windows Service associated with Intella Connect, without the need of going through the full (un)installation of the software. It can easily be achieved with a help of connect-service.bat batch script.

One can follow these steps:

  1. Open Windows’ Command Prompt as an Administrator. The rest of command are to be executed inside this prompt.
  2. Go to the directory holding the latest installation of Intella Connect (2.0.1) For example:
cd C:Program FilesVoundIntella Connect 2.0.1
  1. Uninstall the previous version by running:
connect-service.bat uninstall
  1. Then install version from the current directory by running:
connect-service.bat install CONNECT_USER CONNECT_USER_PASSWORD
Available commands are listed below:
  • uninstall - uninstalls any previous “Intella Connect” Windows Service
  • install - installs “Intella Connect” Windows Service for the version located in the current directory
  • start - starts “Intella Connect” Windows Service
  • stop - stops “Intella Connect” Windows Service
  • debug - starts “Intella Connect” Windows Service with additional debugging information
Caveats:
  • if the connect-service.bat operation outputs “SUCCESS”, it doesn’t necessarily mean that operation achieved it’s goal (this output just reports that the operation did not encounter errors while executing)
  • when providing the account name as an argument (ex. CONNECT_USER) make sure to always provide its associated Windows’ Domain too. For instance, for a local account “JohnDoe” the correct value would be ”.JohnDoe” because this account is a part of the local domain.

Finally, to check if everything went fine it’s best to open “Services” tool built into Windows and verify if “Intella Connect Service” entry is listed as a running Service. There should also be “Log On As” property matching the account specified in step 4. If it doesn’t show up there, then you should modify it there directly by right clicking and opening “Properties” (“Log On” tab).