During the setup for FB7, it asks you for an account to run under. Ideally, I'd have my FB services running under NT_AUTHORITY\NetworkService as to avoid running under a specific user account. Then, I only need to grant permissions from the FB Webserver to the FB SQL machine, and I don't have to deal with expiring passwords. This is my preferred way of running production services.
The FB installer won't let me do this, and I'm reluctant to start changing things after I've installed. Anyone have any insight?
Here's what you should do after you've installed FogBugz to make it run under the Network Service account:
Configure FB Maintenance to run as "Network Service"
Change Application Pool Identity to be "Network Service"
Grant Read Permission to "Network Service" under HKLM\Software\Fog Creek Software\Fogbugz and it's children
Grant Permissions to SQL for that Machine's Network Service account
The "Network Service" account should have Read permissions on the entire FogBugz install directory with Write access to FileUploads and Full Control on Plugins (this is usually C:\Program Files (x86)\FogBugz)