---
schema_version: "1"
id: e1c308014ca22cf3d901a4fbddff6aa90f96755aa864c49ceda90dee657894cb
title: Revoke Run As Service Account Permissions
collection: tableau
version: current
locale: en-us
portal_url: https://docs.salesforce.com/tableau/current/en-us/server/runas_change.md
canonical_url: https://help.tableau.com/current/server/en-us/runas_change.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 6f7588c6c2d8bd0b9f3b2a278160ee64a279e8c908b70ac97abd28e274ffc014
description: Revoke permissions from a previous Run As service account.
---
[Skip to main content](#main-content)

# Revoke Run As Service Account Permissions

Changing the Run As service account in Tableau Server Configuration Utility does not remove the permissions from the previous account. Therefore, after you change the Run As service account, we recommend manually revoking permissions from the previous account as a secure best practice. Follow the procedure below to revoke permissions from the previous Run As service account.

If you have changed your Run As service account and your organization uses a forward proxy solution, then you may need to reconfigure the local LAN settings with the new Run As service account. See [Configure a forward proxy server](https://help.tableau.com/current/server/en-us/proxy.htm#Configur2) for more information.

You must be logged onto the Tableau Server computer with an administrator account to perform the following procedures.

## Remove folder permissions

Tableau Server configures permissions on Windows folders according to the location where you install Tableau Server. Before you remove folder permissions, review [Verify Folder Permissions](https://help.tableau.com/current/server/en-us/runas_confirm_read_ex.htm) to identify the resources for which you will need to remove permissions. Run the following procedure for each of the resources you have identified:

1. For each resource (drive, folder, executable), right-click the resource, and then click **Properties**.
2. On the resource property page, click the **Security** tab, and then click **Edit** to change permissions.
3. On the Permissions page, select the previous Run As service account and then click **Remove**.
4. Click **OK**.

## Remove registry permissions

Remove the previous Run As service account from the following registry locations:

- HKEY\_CURRENT\_USER\\Software\\Tableau
- HKEY\_LOCAL\_MACHINE\\Software\\Tableau

**Warning**: Editing the Windows registry incorrectly can have harmful effects on your computer.

1. Open the Registry Editor by entering `regedit` in Windows Run, and then clicking **OK**.
2. For each registry directory, right-click the **Tableau** folder, and then click **Permissions**.
3. In the **Permissions for Tableau** page, select the previous Run As service account, and then click **Remove**.
4. Click **OK**.

## Remove security policies

Remove the previous Run As service account from the following security policies:

- “Log on as a service” policy
- “Allow log on locally” policy

1. Select **Start** > **Control Panel** > **Administrative Tools** > **Local Security Policy**.
2. In **Local Security Policy**, open **Local Policies**, select **User Rights Assignments**.
3. For each policy:
    1. Right-click the policy and then select **Properties**.
    2. On the policy property page, select the previous Run As service account, and then click **Remove**.
    3. Click **OK**.