Limiting Access to Commerce Server Services
During Commerce Server Setup, in the Services Account dialog box, you specify the Windows user name and password for the following Commerce Server services: List Manager, Direct Mailer, and Predictor. Setup automatically grants these Windows accounts the Log On as a Service right. The following figure shows the Services Account dialog box.
.gif "Ee797484.cs_dp_deploy_servicesaccounts(en-US,CS.10).gif")
In the same dialog box, you specify an account under which Event Logging will be performed. This last account is used in the Commerce Event Logging COM+ package that is created by Setup.
Make sure you specify the proper account for each service. For List Manager, your Commerce Server Business Desk users must be able to read folders from which they import lists and write to folders onto which they export lists. The List Manager service account must have appropriate NTFS permissions on the folders from which users will import and export lists.
Also, Setup does not permit you to set up these services to use the Local System account. Although it is possible to do this manually after Setup, it is not a good idea because doing so might give the services more permissions than they need.