CTX116391 – List of XenApp 5 Service User Accounts and Default Permissions – Citrix Knowledge Center

View products this document applies to

Summary

This article lists the user accounts for Citrix services.

Background

The accounts detailed below may have associated impacts on Active Directory and local Group Policy objects, as well as permissions, and should not be modified. Because two of these accounts are granted power user rights, some customers might be tempted to modify or remove them. If either of the two new accounts described below are deleted or permissions are altered, Citrix Presentation Server might not function properly.

Service user accounts/permissions

Account Name	Permissions	Notes
Local Service	Minimal	NT AUTHORITYLocalService
Network Service	Minimal, network resources	NT AUTHORITYNetworkService
Local System	Administrator	NT AUTHORITYSystem
ctx_cpsvcuser	Domain or local user	Acts as a power user
Ctx_StreamingSvc	Domain or local user	Acts as a user
Ctx_ConfigMgr	Domain or local user	Acts as a power user
Ctx_CpuUser	Domain or local user	Acts as a user

Note: The Ctx_CpuUser account and its related services do not appear unless multiple processors are configured/available during the Presentation Server installation process.

Service user account policy settings

Policies	Local Service	Network Service	ctx_cpsvcuser	Ctx_StreamingSvc	Ctx_ConfigMgr	Ctx_CpuUser
Change the system time	X
Generate security audits	X	X
Increase quotas	X	X
Load and unload device drivers			X
Log on as a batch job	X	X	X	X	X	X
Log on as a service		X	X	X	X	X
Replace a process level token	X	X		X
Restore files and directories				X
Debug programs						X
Increase scheduling priority						X