User Accounts Created by Microsoft Provisioning Framework

Microsoft Provisioning Framework (MPF) creates two user accounts: the MPF service account (MPFServiceAcct) and the MPF client account (MPFClientAcct). For domain deployments, these accounts are installed in the Active Directory directory service. For local installations, these accounts are installed in the Microsoft Windows operating system as workgroup accounts.


MPFServiceAcct is the default account for provisioning servers. It has permissions to run provisioning engines, queue managers, and auditing and recovery managers.


When you are setting the password for MPFServiceAcct during setup, the following important conditions apply:


MPFClientAcct is only used to submit Simple Object Access Protocol (SOAP) requests to MPF through SOAP Internet Server Application Programming Interface (ISAPI). MPFClientAcct is a member of the MPFClientAccts group.