enable the access to local machine under self hosted integration runtime

Hi @adula amala ,

Thank you for reaching out to the Microsoft Q&A forum. 

If your goal is to allow the Self-Hosted Integration Runtime (SHIR) to access resources running on the same machine where SHIR is installed, you can enable local machine access by running the following command from an elevated Command Prompt on the SHIR host:

dmgcmd.exe -EnableLocalMachineAccess

This enables the SHIR to access services hosted on localhost and the machine's private IP address. If you are using a multi-node SHIR cluster, the command should be executed on each node.

Additionally, please verify the following:

• The Self-Hosted Integration Runtime is running and in a healthy state.
• The Integration Runtime service account has the required permissions to access the target local resource.
• Any firewall or network security settings allow the required communication.
• If you are accessing a local folder or file share, ensure the necessary folder permissions have been granted.

If the issue persists, please share more details about the resource you are trying to access (for example, SQL Server, File Share, Oracle, Web Service, etc.) along with any error messages. This will help the community provide more targeted guidance.

I hope this helps. Please let us know if you have any further questions.

Hi Adula,

If you want the self-hosted Integration Runtime (SHIR) to access services on the same machine, local machine access needs to be enabled on the SHIR node.

Open Command Prompt as Administrator on the SHIR machine and run:

dmgcmd.exe -EnableLocalMachineAccess

This enables access to localhost and the machine's private IP. Microsoft notes that in a multi-node SHIR setup, you need to run it on each node.

Also check the Integration Runtime service account. By default it runs as NT SERVICE\DIAHostService, so that account must have the required permissions on the local resource you are trying to access.

If by "local machine access" you mean accessing a local folder, that is a separate security setting. You may need to review the SHIR local folder path validation setting rather than only enabling local machine network access.