Using NT Authentication with domain users and user groups

With this method, each server uses the specified domain user or a member of the specified user group to access all the other servers in the deployment. To authenticate your servers using domain users and user groups, follow these steps:

1. Create a service account user or user group in your domain. For a user group, add authorized domain users to your servers. You might need to have domain administration privileges to do this.
2. On the Master Server, use SQL Server Management Studio to create a login for the domain service account user or user group, with a default database of BFEnterprise, and give this login System Admin (sa) authority or the DBO (DataBase Owner) role on the BFEnterprise and master databases.
3. On the Master Server, change the LogOn settings for the FillDB, BES Root, and Web Reports services to the domain user or member of the user group created in step 2, and restart the services.