When installing Tableau Server, TSM may reflect no keys activated and one of the following errors might occur when activating a license or starting tablicsrv:
Or:
Or:
Or:
Or:
The Local Service account is used by License Manager to access and execute files located under the Tableau Server installation directory (%PROGRAMDATA%\Tableau\Tableau Server) and write to the tablicsrv.log file. These actions rely upon permissions that are inherited through the Users security group on the Tableau Server installation directory.
As shown above, the following permissions (all of which are inherited by Local Service) are granted to the Users security group:
If Local Service does not have these permissions, Tableau Server will fail to initialize during installation, resulting in the errors above.
As a security measure, some organizations remove the Users group from all installation directories in their environments. Usually, such organizations remove the User group with an automated change management software solution such as Group Policy.
You can verify whether your organization is removing the User group from installation directories by navigating to the Tableau Server installation directory (%PROGRAMDATA%\Tableau\Tableau Server), and then opening Properties > Security. If the Users group is not listed then you need to update the permissions.
Because many organizations use change management solutions to remove the User group during startup, simply adding the User group back to the Tableau Server installation directory is not a best practice.
Instead apply permissions on the Tableau Server installation directories to the Local Service using Windows icacls command.
To apply permissions:
Log onto the computer running Tableau Server as an administrator.
Open a command prompt and run the following commands:
icacls “%PROGRAMDATA%\Tableau\Tableau Server” /reset
This command resets permissions and enables inheritance on the installation directory.
icacls “%PROGRAMDATA%\Tableau\Tableau Server” /grant *S-1-5-19:(OI)(CI)F /T
This command grants explicit permissions to the Local Service account, which is represented here by the global security identifier, *S-1-5-19.
Restart the Tableau Server license manager (in some environments, the whole computer will need to be restarted for the permissions to take effect).
001473152

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.