Page Comparison

1. Add Users, Groups & Services in Active Directory

2. Add Velocity DB in DB server

3. Create SQL Login Permission for newly created custom groups

4. Install Velocity in Velocity Server machine with a Custom User and Service Groups

5. Restart all the Velocity related services, SQL Server Service, close Velocity Service Control Manager (VSCM) and again restart all services and VSCM
   

1. Enable “Custom Velocity Users Group Names” setting in Velocity Service Control Manager

2. Add Users, Groups & Services in Active Directory

3. Add Users, Groups & Services in Velocity local server

4. Add Velocity folder permission for newly created groups

5. Create SQL Login Permission for newly created custom groups

6. Update Velocity & SQL Server services with newly created services

7. Restart all the Velocity related services, SQL server Service, close Velocity Service Control Manager (VSCM), and again restart all services and VSCM

This section explains how to assign the new users group permissions to the Velocity directory.

To assign the new users group permissions to Velocity:

1. On the Velocity server, open Windows Explorer.

2. From the Program Files (x86) folder, select Identiv and then Velocity.

3. Right-click the Velocity folder and select Properties.
   The Velocity Properties dialog box appears.
   

   

4. Select the Security tab, then click Edit.
   

   

5. In the ‘Permissions for Velocity’ dialog box, click Add.
   The ‘Select Users, Computers, Service Accounts, and Groups’ dialog box appears.
   

   

6. If required, click Locations and select the domain server, then click OK.

7. At the ‘Enter the object names to select’ dialog box, do one of these:

   • Enter the users group name you are seeking (CustomVelUsersGrp) and click Check Names. If the name is correctly entered, the name is underlined.

   • Click Advanced and in the ‘Common Queues’ section, select a text string to find the required group. Click Find Now. All relevant users groups appear in the search results.
     Select the previously-defined users group.
     

     

8. Click OK.
   The ‘Permissions for Velocity’ dialog box reappears, with the selected users group highlighted.

9. In the ‘Permissions’ area at the bottom of the page, select every ‘Allow’ check box except for the ‘Full control’ permission, as shown in this example:
   

   

10. Click OK.

11. Now repeat steps 3 to 7 to add permission for Services Group (CustomVelServicesAcct)
    

    

12. Click OK.
    The ‘Permissions for Velocity’ dialog box reappears, with the selected Services Group highlighted.

13. In the ‘Permissions’ area at the bottom of the page, select every ‘Allow’ check box except for the ‘Full control’ permission, as shown in this example:
    

    

14. Click OK

Note: Starting from Velocity v3.8.4, some of the data files are moved to ProgramData. So please follow the steps to give permission to Velocity files under the ProgramData folder.

To assign the new users group and service groups permissions to Velocity (ProgramData)

1. On the Velocity server, open Windows Explorer.

2. Select View > Show > Hidden items.

3. From the ProgramData folder, select Identiv and then Velocity.
   

   

4. Right-click the Velocity folder and select Properties.
   The Velocity Properties dialog box appears.

5. Now follow step 4 to step 14 from the above topic.

Checking File and Folder Permissions

This section explains how to verify the permissions of the new account that starts the Velocity services. In particular, it enables access to the Velocity database archive files.

To check that the relevant files and folders include the required permissions:

1. On the client computer, open Windows Explorer.

2. Expand the root drive (normally C:) to reveal Program Files then Microsoft SQL Server then MSSQL15.IDENTIV then MSSQL then DATA.
   

   

3. Identify those folders and files that the custom users account will employ. For each one, perform Steps 4 through 8.

4. Right-click on a folder or file and select Properties.

5. In the Properties dialog, click the Security tab.
   A dialog box like this example appears:

6. Select to highlight each user and users group assigned to the custom users group. In the Permissions pane, inspect the permissions assigned to each user or group. All relevant entities should have all permissions except ‘Full control’ checked.

7. If all permissions (except ‘Full control’) are not checked, Edit.
   A dialog box like this example appears:
   

   

8. Select each check box (except ‘Full control’) in the Allow column of the Permissions pane, then click OK.
   Repeat Steps 4 through 8 for each required folder and file.

Back To Top

This section explains how to enable Velocity operators to use the new users group.

To enable Velocity operators to use the new users group:

1. At the Velocity server’s desktop, right-click on the Velocity Service Control Manager icon in the tray and select Properties. The Velocity Settings dialog box appears.

2. Select the Advanced option in the left pane, then select the ‘Custom Velocity Users Group Names’ check box:
   

   

   
   Note: This option is available only when your Velocity Server is part of an Active Directory domain; it is not available in a local workgroup.

   A warning message asks if you want to proceed.
   

   

3. Click Yes, then click OK twice.
   

   

4. Open Velocity.

5. From the Administrator pane, select Velocity Configuration then Operators.
   Because you have ceded control for creating operators to Active Directory by selecting Custom Velocity User Group Names in the Velocity settings, you must use an existing operator previously created in Active Directory.

6. In the right pane, double-click an existing operator name. This operator name must already be resident in Active Directory.
   The Operator Properties dialog box appears.

7. In the ‘Name’ box, enter a name for this operator.
   

   

8. In the ‘Domain’ list, select the domain where the newly-defined users group resides.

9. Fill out all other fields and roles as required.
   

   

10. Click OK.

11. Add other operators to this domain as required.

Back To Top