---
schema_version: "1"
id: 5d1e116259ad5df585f1856063e40ff0c6da93cf07f6073485736b2e3382373d
title: Revoke Run As Service Account Permissions
collection: tableau
version: current
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/current/en-gb/server/runas_change.md
canonical_url: https://help.tableau.com/current/server/en-gb/runas_change.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 674bdb2793ae9e19a0794fbc7254499e6a556e271538d7530cf65b32885ff094
description: Revoke permissions from a previous Run As service account.
---
[Skip to main content](#main-content)

# Revoke Run As Service Account Permissions

Changing the Run As service account in Tableau Server Configuration Utility does not remove the permissions from the previous account. Therefore, after you change the Run As service account, we recommend manually revoking permissions from the previous account as a secure best practice. Follow the procedure below to revoke permissions from the previous Run As service account.

If you have changed your Run As service account and your organisation uses a forward proxy solution, then you may need to reconfigure the local LAN settings with the new Run As service account. See [Configure a forward proxy server](https://help.tableau.com/current/server/en-gb/proxy.htm#Configur2) for more information.

You must be logged onto the Tableau Server computer with an administrator account to perform the following procedures.

## Remove folder permissions

Tableau Server configures permissions on Windows folders according to the location where you install Tableau Server. Before you remove folder permissions, review [Verify Folder Permissions](https://help.tableau.com/current/server/en-gb/runas_confirm_read_ex.htm) to identify the resources for which you will need to remove permissions. Run the following procedure for each of the resources you have identified:

1. For each resource (drive, folder, executable), right-click the resource, and then click **Properties**.
2. On the resource property page, click the **Security** tab, and then click **Edit** to change permissions.
3. On the Permissions page, select the previous Run As service account and then click **Remove**.
4. Click **OK**.

## Remove registry permissions

Remove the previous Run As service account from the following registry locations:

- HKEY\_CURRENT\_USER\\Software\\Tableau
- HKEY\_LOCAL\_MACHINE\\Software\\Tableau

**Warning**: Editing the Windows registry incorrectly can have harmful effects on your computer.

1. Open the Registry Editor by entering `regedit` in Windows Run, and then clicking **OK**.
2. For each registry directory, right-click the **Tableau** folder, and then click **Permissions**.
3. In the **Permissions for Tableau** page, select the previous Run As service account, and then click **Remove**.
4. Click **OK**.

## Remove security policies

Remove the previous Run As service account from the following security policies:

- “Log on as a service” policy
- “Allow log on locally” policy

1. Select **Start** > **Control Panel** > **Administrative Tools** > **Local Security Policy**.
2. In **Local Security Policy**, open **Local Policies**, select **User Rights Assignments**.
3. For each policy:
    1. Right-click the policy and then select **Properties**.
    2. On the policy property page, select the previous Run As service account, and then click **Remove**.
    3. Click **OK**.