---
schema_version: "1"
id: c3304cf0e06e672169af3dcfec01ae8d2636636631a627ab679a58e379e5d8a8
title: Revoke Run As Service Account Permissions
collection: tableau
version: next
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/next/en-gb/server/runas_change.md
canonical_url: https://help.tableau.com/v0.0/server/en-gb/runas_change.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 4e70e23e57b626283c85826c52ae0c71a3dd539874acc94e4d1ac0b66e047cb4
description: Revoke permissions from a previous Run As service account.
---
[Skip to main content](#main-content)

# Revoke Run As Service Account Permissions

Changing the Run As service account in Tableau Server Configuration Utility does not remove the permissions from the previous account. Therefore, after you change the Run As service account, we recommend manually revoking permissions from the previous account as a secure best practice. Follow the procedure below to revoke permissions from the previous Run As service account.

If you have changed your Run As service account and your organisation uses a forward proxy solution, then you may need to reconfigure the local LAN settings with the new Run As service account. See [Configure a forward proxy server](https://help.tableau.com/v0.0/server/en-gb/proxy.htm#Configur2) for more information.

You must be logged onto the Tableau Server computer with an administrator account to perform the following procedures.

## Remove folder permissions

Tableau Server configures permissions on Windows folders according to the location where you install Tableau Server. Before you remove folder permissions, review [Verify Folder Permissions](https://help.tableau.com/v0.0/server/en-gb/runas_confirm_read_ex.htm) to identify the resources for which you will need to remove permissions. Run the following procedure for each of the resources you have identified:

1. For each resource (drive, folder, executable), right-click the resource, and then click **Properties**.
2. On the resource property page, click the **Security** tab, and then click **Edit** to change permissions.
3. On the Permissions page, select the previous Run As service account and then click **Remove**.
4. Click **OK**.

## Remove registry permissions

Remove the previous Run As service account from the following registry locations:

- HKEY\_CURRENT\_USER\\Software\\Tableau
- HKEY\_LOCAL\_MACHINE\\Software\\Tableau

**Warning**: Editing the Windows registry incorrectly can have harmful effects on your computer.

1. Open the Registry Editor by entering `regedit` in Windows Run, and then clicking **OK**.
2. For each registry directory, right-click the **Tableau** folder, and then click **Permissions**.
3. In the **Permissions for Tableau** page, select the previous Run As service account, and then click **Remove**.
4. Click **OK**.

## Remove security policies

Remove the previous Run As service account from the following security policies:

- “Log on as a service” policy
- “Allow log on locally” policy

1. Select **Start** > **Control Panel** > **Administrative Tools** > **Local Security Policy**.
2. In **Local Security Policy**, open **Local Policies**, select **User Rights Assignments**.
3. For each policy:
    1. Right-click the policy and then select **Properties**.
    2. On the policy property page, select the previous Run As service account, and then click **Remove**.
    3. Click **OK**.