Add the right to replace the process-level token

On a Windows operating system, the administrator user accounts that are used for PDF conversion (PDFG users) must replace process level token privileges. You can add this right by using the Group Policy Editor:

  1. In the Windows Start menu, click Run and then enter gpedit.msc.
  2. Click Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment. Edit the Replace a process level token policy to include the Administrators group.
  3. Add the user to the Replace a Process Level Token entry.

Additional configuration required for OpenOffice, Microsoft® Word, and Microsoft® PowerPoint on Windows Server 2008

If you are running OpenOffice, Microsoft® Word, or Microsoft® PowerPoint on Windows Server 2008, disable UAC for each user added.

  1. Click Control Panel > User Accounts > Turn User Account Control on or off.
  2. Deselect the box “Use User Account Control (UAC) to help protect your computer” and click OK.
  3. Restart the computer for the settings to take effect.

Additional configuration required for OpenOffice on Linux® or Solaris™

  1. Add user accounts. (See Add a user account.)

  2. Next, you must change the /etc/sudoers file. The default permission for this file is 440. Change the permission for this file to writable.

  3. Add entries for additional users (other than the administrator who runs the Forms Server) in the /etc/sudoers file. For example, if you are running AEM forms as a user named lcadm and a server named myhost, and you want to impersonate user1 and user2, add the following entries to /etc/sudoers:

     lcadm myhost=(user1) NOPASSWD: ALL
     lcadm myhost=(user2) NOPASSWD: ALL
    

    This configuration enables lcadm to run any command on host ‘myhost’ as ‘user1’ or ‘user2’ without prompting for a password.

    NOTE
    Ensure that you have assigned system user and PDFG user roles to ‘user1’ and ‘user2’ . To assign a PDFG role to a user, see Add a user account
  4. Also in the /etc/sudoers file, locate and comment out this line by adding a number sign (#) at the beginning of the line:

    Defaults requiretty
    

    This enables you to add Linux® users.

  5. Change the permission for the etc/sudoers file back to 440.

  6. Allow all the users that you added via Add a user account to make connections to the Forms Server. For example, to allow a local user named user1 the permission of making the connection to the Forms Server, use the following command

    xhost +local:user1@

    For more details, see xhost command documentation.

  7. Restart the server.

NOTE
OpenOffice must be installed in a directory location that all PDFG users can access. You can verify this by logging in as the PDFG user and checking whether you can launch OpenOffice without issues.

Add a user account

NOTE
Ensure that the user has admin privileges to access the administrator console.
  1. In the administration console, click Services > PDF Generator > User Accounts.

  2. Click Add and enter the user name and password of a user who has administrative privileges on the Forms Server. If you are configuring users for OpenOffice, dismiss the initial OpenOffice activation dialogs.

    NOTE
    If you are configuring users for OpenOffice, the number of instances of OpenOffice cannot be greater than the number of user accounts specified in this step.
  3. Restart the Forms Server.

Remove a user from the list used for multi-threaded file conversions

  1. In the administration console, click Services > PDF Generator > User Accounts.
  2. Click the check box next to the user who you want to remove and click Delete.
  3. On the confirmation page, click Delete.
  4. Restart the Forms Server.

Change the password for an account

  1. In the administration console, click Services > PDF Generator > User Accounts.
  2. Click the user name, and enter and confirm the new password. This password must match the user’s system password.

Experience Manager


Espressos & Experience Manager: AEM Forms

Espressos & Experience Manager

Thursday, Mar 6, 7:00 PM UTC

Join Adobe's AEM product team as they highlight AEM Forms' latest innovations, including: the new Gen AI Assistant, Unified Composition with AEM Sites, and new ways to deploy forms through conversations.

Register

Put the Customer at the Center and Build Relationships That Last a Lifetime

Online | Strategy Keynote | General Audience

First impressions last a lifetime. Great first impressions feel personal, connected, and relevant right from the start. From the first...

Wed, Mar 19, 2:30 PM PDT (9:30 PM UTC)

Register

Driving Marketing Agility and Scale: Transforming your Content Supply Chain with AI

Online | Strategy Keynote | General Audience

Marketers everywhere are feeling the pressure to deliver impactful campaigns faster and at greater scale. This Strategy Keynote explores...

Tue, Mar 18, 2:30 PM PDT (9:30 PM UTC)

Register

Connect with Experience League at Summit!

Get front-row access to top sessions, hands-on activities, and networking—wherever you are!

Learn more