Access rights

Use Windows Authentication with SQL Server

You can configure Sitecore to use Windows Authentication for a SQL connection and remove the user name and password from the connectionStrings.config file.

To configure Sitecore to use Windows Authentication:

1. In Windows, launch the IIS Manager.

2. Select the application pool that Sitecore is running under, click Advanced Settings and in the Identity field, set the identity to the domain user.

   

3. In SQL Server, register the domain user and grant the appropriate security permissions to the Sitecore databases for the domain user.

4. On the computer that hosts Sitecore Experience Platform, add the domain user to the IIS_IUSRS group.

   For more information about changing the permissions for the IIS_IUSRS group, see the section Server file system requirements. 

5. In a text editor, edit the \App_Config\ConnectionStrings.config file and replace the user id and password parameters with trusted_connection=Yes.

   <?xml version="1.0" encoding="utf-8"?>
   <connectionStrings>
   <add name="core" connectionString="Data Source=.\sql2016;Database=sc9_Core;Trusted_Connection=True"
   />
   <add name="master" connectionString="Data Source=.\sql2016;Database=Sandbox6_Master;Trusted_Connection=True"
   />
   <add name="web" connectionString="Data Source=.\sql2016;Database=Sandbox6_Web;Trusted_Connection=True"
   />
   </connectionStrings>

6. Prepare your identity so that it can be used as a service account with the aspnet_regiis.exe file and the -ga switch.

Use Windows performance counters

Sitecore Experience Platform contains built-in functionality that reads and updates the Windows performance counters that you can use to monitor and troubleshoot the Sitecore application. This functionality requires access to Windows registry keys. You can grant access by making the application pool identity a member of the built-in Performance Monitor Users group.

For more information, see Microsoft’s documentation about Application Pool Identity.

If the required registry permissions are not granted, whenever the application attempts to access Windows performance counters, the Access to the registry key 'Global' is denied error is registered in the Sitecore log files.

To avoid this error, you must prevent Sitecore from updating the performance counters.

To prevent Sitecore from updating the performance counters:

• In a text editor, open the \App_Config\Sitecore.config file and set the Counters.Enabled setting to false.