Saprouter service on windows - which user rights are required?

Question

Hi,
We have the saprouter service running in a windows 2003 server, this service is started by a user account named 'saprouter' which has its password set to never expires.
Due to security concerns, our IT Security Deparment have ask us to apply all the following restrictions to the 'saprouter' user:
   1) 'Logon locally' user right is disabled
   2) Userid is not a member of the Administrators group
   3) Deny access to the user rights: 'Access this computer from network' and      'Logon through Terminal Services'
As per our security policy, non-expiring passwords are allowed only for users that can meet all the conditions listed above.
The questions are ¿Which user rights should be granted to the user account that starts the saprouter service? ¿Could we apply the conditions listed above without impact the saprouter service?
Thank you for your kind attention.
Sokram

Answer 1

following permissions are required to set SAPRouter working :
1. password never expires
2. user never change the password
3. should be member of administrator
4. profile --> home folder :c:\user\sap\saprouter (path of instllables)
5. end disconnected session : never , active session limit : never , idle session limit : never
check if you can apply above points for your users
Regards,