How To: Set up ArcGIS Server permissions outside of a domain


Instructions provided describe how to set up ArcGIS Server permissions outside of a domain. In many computer environments, host machines for the various components of ArcGIS Server might not exist within a common domain. If no domain controller exists, ArcGIS Server user accounts must be authenticated locally.


Without the use of a Domain Controller, users must be authenticated locally on the individual host machines. This means that each machine that hosts a component of ArcGIS Server must have the appropriate account listed in the local user directory. Account allocations may differ per configuration.

Once all of the components of ArcGIS Server are installed, navigate to each host machine and add the Server Object Manager service, agsuser or agsadmin account to the local users directory.

  1. Open the Computer Mangagement Console and expand the 'Local Users and Groups' tree.
  2. Click on the 'users' folder.
  3. Click the 'Action' dropdown list menu and slect 'New User'. The add user dialog appears.
  4. Select the appropriate user name, password, and password persistence rule.
  5. Click 'Create' and then 'Close' to close the dialog. The user should be added to the list.
  6. Click on the 'Groups' folder. If the machine in question is hosting the Server Object Manager, the agsadmin and agsusers groups are listed.
  7. Add the new user account to the appropriate group.