› Configuration › Automation › Local automation service › Impersonation

Impersonation

The services of PSIcapture, including their spawned executables, such as AutoImportProcessor.exe and CaptureServices.exe, are set up by default to be run by the local system administrator. With impersonation, the Auto Import process can access local and network resources using an alternative set of credentials. Otherwise, the Auto Import process uses the credentials specified in the Platform Services - Service (services.msc) area under Capture Services > Properties > Log on (tab). To avoid needing to elevate capture services, the impersonation feature can be used to specify credentials when PSIcapture attempts to:

  • Log on and run capture services outside of a user session (run while logged off).

  • Access storage locations on the network or in a restricted environment.

  • Access monitored directories or Auto Import monitored locations that are located on the network or in a restricted environment.

  • Spawn AutoImportProcessor.exe and other executable utilities employed by PSIcapture in certain modules.

  • Create Configuration, Batch Manager, and other temporary files included in the ProgramData of PSIcapture.

Elevating Capture Services or Using Impersonation

In some cases, you may opt to elevate your capture service to run as (Capture Services > Properties > Log on (tab)) an administrator or another authorized resource. In this case, the service runs as the specified user, generating all data in the following directories and registry entries:

  • C:\ProgramData\PSIGEN

  • C:\Program Files (x86)\PSIGEN

  • C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Microsoft SQL Server Local DB\

  • HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\PSIGEN Software, Inc.

  • Any storage locations, migration paths, and monitored directories

All of this data is instead generated using the credentials you specified in the aforementioned Windows Services panel (services.msc). Performing this step requires a clean generation of the ProgramData, or for permissions to be set for the user accordingly to modify (Full Control) the existing files. In cases of elevating an existing system with ProgramData previously created by a different user (or the default local system administrator), the ProgramData needs to be completely re-created. Contact Kofax support for assistance with this process.

Setting Impersonation may have unexpected results and should only be set by a qualified IT professional. Please contact Kofax support before making alterations to your configuration and Batch Manager ProgramData. Always back up C:\ProgramData\PSIGEN before making changes to this area.