Permission in SharePoint 2010 Farm account


While establishing the farm account . It is very important to assign the correct settings for the server farm account.

The account needs to be part of the domain, but it only needs to be a regular user and not a domain admin. As a result of the SharePoint configuration wizard, SharePoint will increase the level of account’s access as necessary. It will be given the SQL Roles of dbcreator and securityadmin. The account will also be added to the following local security groups::

Screenshot are also provided to create correct reference. I have used an administrator account but not a domain admin.

· IIS_IUSRS

· Performance Log Users

· Performance Monitor Users

· WSS_ADMIN_WPG

· WSS_RESTRICTED_WPG

· WSS_WPG

Performance Monitor Users

The account is also given the following Local Security Policy – User Rights Assignments:

· Adjust memory quotas for a process

· Logon as a service

· Replace a process level token

The account will be used for the following Windows Services:

· Windows SharePoint Services Timer V4

· Windows SharePoint Services User Code Host V4

Not the least, application pool of SharePoint Central Administration will also use this account

So, Consideration of account while creating a SharePoint Environment should be given utmost importance.

Feel free to Rate and provide feedback if you find post useful

Hope this help

Ashi

This entry was posted in SharePoint2010, SQLServerPedia. Bookmark the permalink.

2 Responses to Permission in SharePoint 2010 Farm account

  1. Rohit Garg says:

    Nice post…….Really helpful.

  2. Mike Moris says:

    Thanks for sharing your info. I truly appreciate your efforts and I will be waiting for your further
    write ups thank you once again.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s