[JENKINS-63477] Clarify Windows Installer Service Logon Credentials

[timja]

A number of questions have popped up on S/O regarding the choice of "Service Logon Credentials" (Step 3 of new installer).

What are the differences on the logon types choices on Jenkins?
jenkins installation windows 10 “Service Logon Credentials”

The blog post says;

The installer now allows you to specify the username/password for the account to run as and checks that the account has LogonAsService rights.

But the installer window just says:

Enter service credentials for the service.
Jenkins 2.150.1 installs and runs as an independent Windows service, To operate in this manner, you must supply the user account credentials for Jenkins 2, 150.1 to run successfully.

I would suggest some greater clarity within the installer dialog (ie: mention LogonAsService (and how to check/set) ), on the Docs Installing Windows page and if possible, update the blog announcement / post itself.

Also, consider setting the default option to NOT be the discouraged LocalSystem (Using the LocalSystem Account as a Service Logon Account, Why running a service as Local System is bad on windows ), rather encourage user to set up a proper service account (w/ link to steps).
   

---

Originally reported by ianw, imported from: Clarify Windows Installer Service Logon Credentials

• assignee: slide_o_mix
• status: Open
• priority: Minor
• resolution: Unresolved
• imported: 2022/01/10

[timja]

slide_o_mix:

Thank you for the feedback, I'll see how I can make things more clear in these regards

[timja]

slide_o_mix:

For your last item "consider setting the default option to NOT be the discouraged LocalSystem". This is already the case, the non-recommended item is not selected by default.

[timja]

slide_o_mix:

This is my proposed update to the account selection screen, please let me know if this would help or not.

 

[timja]

ianw:

I like that it mentions LogonAsService (and that Run as local / domain user is default, and I assume "2.303.1" updates w/ every release).

So, technically it satisfies the concerns and I'd sign-off on it.

I wonder if for the less experienced or for TroubleShooting, a link to an external reference(s) like the Jenkins book - Installation - Windows page and MS Using the LocalSystem Account as a Service Logon Account for "More Info ?" might be beneficial? ps: the Git installer is chock full of links to added details, w/good reason.

The link to a web page allows for out-of-band elaboration on details to questions which just don't fit in the dialog (eg: Why can't I install a service on Windows Home? I'm not a Local ADmin - what do I do now?) or added screenshots as there are now in the book, so you don't need to revisit the installer unless something really changes (like Win11 ?).

Oh, can you put a line break after "successfully." ? not sure if supported.

[timja]

slide_o_mix:

We can do a lot of stuff if we customize all of the dialogs. I'll see how much work it would be.

 

Adding a line break causes the text to be clipped, this would require a customization of the dialog (more than just a string resource change) to do.