RE: 2010 service account warning
Hi Paul I always run things in least privilege configuration and the only time I run the farm account as an admin is when I am: 1. Provisioning the user profile service 2. Applying a service pack or cumulative update After install I always revoke the local administrators right. The effect is a couple of DCOM fixes need to be made but for most installs that usually is about it. For a dev box I think its really important to run it this way, because otherwise something that might work perfectly fine in dev may not work when deployed to prod which is more likely to be least-privilege. regards Paul From: ozmoss-boun...@ozmoss.com [mailto:ozmoss-boun...@ozmoss.com] On Behalf Of Paul Noone Sent: Tuesday, 23 August 2011 11:24 AM To: ozMOSS (ozmoss@ozmoss.com) Subject: 2010 service account warning Hi guys, We've just installed our 2010 dev farm. All we have done is provision CA, no services as yet. We are receiving the following warning: Accounts used by application pools or service identities are in the local machine Administrators group. The more I look into this, the more perplexed I become. The opinions on whether the SP_Farm account should be in this group appear divided. But the fact is that it has to be in order to provision and install services. So what's the opinion of the list? Do you remove it after provisioning, or do you leave it where it is?? I'm also seeing a Missing server side dependencies error. I have activated the SharePoint Server Standard Site Features and SharePoint Server Enterprise Site Features for CA. I then re-analysed this rule but it's still there. Some online references suggest enabling the Search Server Web Parts parts but there's no feature matching that name. Could these messages be appearing simply because we've yet to run the Farm Config wizard? Regards, Paul ___ ozmoss mailing list ozmoss@ozmoss.com http://prdlxvm0001.codify.net/mailman/listinfo/ozmoss
RE: 2010 service account warning
For your missing server side dependencies, is it about search? Once you have search setup you need to click the two admin pages, and it should go away. From: ozmoss-boun...@ozmoss.com [mailto:ozmoss-boun...@ozmoss.com] On Behalf Of Paul Noone Sent: Tuesday, 23 August 2011 12:54 PM To: ozMOSS (ozmoss@ozmoss.com) Subject: 2010 service account warning Hi guys, We've just installed our 2010 dev farm. All we have done is provision CA, no services as yet. We are receiving the following warning: Accounts used by application pools or service identities are in the local machine Administrators group. The more I look into this, the more perplexed I become. The opinions on whether the SP_Farm account should be in this group appear divided. But the fact is that it has to be in order to provision and install services. So what's the opinion of the list? Do you remove it after provisioning, or do you leave it where it is?? I'm also seeing a Missing server side dependencies error. I have activated the SharePoint Server Standard Site Features and SharePoint Server Enterprise Site Features for CA. I then re-analysed this rule but it's still there. Some online references suggest enabling the Search Server Web Parts parts but there's no feature matching that name. Could these messages be appearing simply because we've yet to run the Farm Config wizard? Regards, Paul ___ ozmoss mailing list ozmoss@ozmoss.com http://prdlxvm0001.codify.net/mailman/listinfo/ozmoss
RE: 2010 service account warning
+1... that is a normal problem. Regards Paul Turner Practice Lead - SharePoint SMS Management Technology M 0412 748 168 paul.tur...@smsmt.commailto:paul.tur...@smsmt.com www.smsmt.comhttp://www.smsmt.com/ About SMS: Level 29, Westpac House, 91 King William Street, Adelaide SA 5095 SMS Management Technology (SMS) [ASX:SMX] is Australia's largest publicly listed Management Services company. We solve complex problems and transform business through Consulting, Technology and Systems Integration P please consider the environment before printing this email [cid:image001.gif@01CC6264.EEA42C10] From: ozmoss-boun...@ozmoss.com [mailto:ozmoss-boun...@ozmoss.com] On Behalf Of Chris Grist Sent: Wednesday, 24 August 2011 1:37 PM To: 'ozMOSS' Subject: RE: 2010 service account warning For your missing server side dependencies, is it about search? Once you have search setup you need to click the two admin pages, and it should go away. From: ozmoss-boun...@ozmoss.commailto:ozmoss-boun...@ozmoss.com [mailto:ozmoss-boun...@ozmoss.com]mailto:[mailto:ozmoss-boun...@ozmoss.com] On Behalf Of Paul Noone Sent: Tuesday, 23 August 2011 12:54 PM To: ozMOSS (ozmoss@ozmoss.commailto:ozmoss@ozmoss.com) Subject: 2010 service account warning Hi guys, We've just installed our 2010 dev farm. All we have done is provision CA, no services as yet. We are receiving the following warning: Accounts used by application pools or service identities are in the local machine Administrators group. The more I look into this, the more perplexed I become. The opinions on whether the SP_Farm account should be in this group appear divided. But the fact is that it has to be in order to provision and install services. So what's the opinion of the list? Do you remove it after provisioning, or do you leave it where it is?? I'm also seeing a Missing server side dependencies error. I have activated the SharePoint Server Standard Site Features and SharePoint Server Enterprise Site Features for CA. I then re-analysed this rule but it's still there. Some online references suggest enabling the Search Server Web Parts parts but there's no feature matching that name. Could these messages be appearing simply because we've yet to run the Farm Config wizard? Regards, Paul NOTICE - This communication is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking any action in reliance on, this communication by persons or entities other than the intended recipient is prohibited. If you are not the intended recipient of this communication please delete and destroy all copies and telephone SMS Management Technology on 1300 842 767 immediately. Any views expressed in this Communication are those of the individual sender, except where the sender specifically states them to be the views of SMS Management Technology. Except as required by law, SMS Management Technology does not represent, warrant and/or guarantee that the integrity of this communication has been maintained nor that the communication is free from errors, virus, interception or interference. inline: image001.gif___ ozmoss mailing list ozmoss@ozmoss.com http://prdlxvm0001.codify.net/mailman/listinfo/ozmoss
RE: 2010 service account warning
Thanks guys. Good to know. Sounds like all our problems are normal then. :) From: ozmoss-boun...@ozmoss.com [mailto:ozmoss-boun...@ozmoss.com] On Behalf Of Paul Turner Sent: Wednesday, 24 August 2011 2:22 PM To: ozMOSS Subject: RE: 2010 service account warning +1... that is a normal problem. Regards Paul Turner Practice Lead - SharePoint SMS Management Technology M 0412 748 168 paul.tur...@smsmt.commailto:paul.tur...@smsmt.com www.smsmt.comhttp://www.smsmt.com/ About SMS: Level 29, Westpac House, 91 King William Street, Adelaide SA 5095 SMS Management Technology (SMS) [ASX:SMX] is Australia's largest publicly listed Management Services company. We solve complex problems and transform business through Consulting, Technology and Systems Integration P please consider the environment before printing this email [cid:image001.gif@01CC626A.FDC91150] From: ozmoss-boun...@ozmoss.com [mailto:ozmoss-boun...@ozmoss.com] On Behalf Of Chris Grist Sent: Wednesday, 24 August 2011 1:37 PM To: 'ozMOSS' Subject: RE: 2010 service account warning For your missing server side dependencies, is it about search? Once you have search setup you need to click the two admin pages, and it should go away. From: ozmoss-boun...@ozmoss.commailto:ozmoss-boun...@ozmoss.com [mailto:ozmoss-boun...@ozmoss.com]mailto:[mailto:ozmoss-boun...@ozmoss.com] On Behalf Of Paul Noone Sent: Tuesday, 23 August 2011 12:54 PM To: ozMOSS (ozmoss@ozmoss.commailto:ozmoss@ozmoss.com) Subject: 2010 service account warning Hi guys, We've just installed our 2010 dev farm. All we have done is provision CA, no services as yet. We are receiving the following warning: Accounts used by application pools or service identities are in the local machine Administrators group. The more I look into this, the more perplexed I become. The opinions on whether the SP_Farm account should be in this group appear divided. But the fact is that it has to be in order to provision and install services. So what's the opinion of the list? Do you remove it after provisioning, or do you leave it where it is?? I'm also seeing a Missing server side dependencies error. I have activated the SharePoint Server Standard Site Features and SharePoint Server Enterprise Site Features for CA. I then re-analysed this rule but it's still there. Some online references suggest enabling the Search Server Web Parts parts but there's no feature matching that name. Could these messages be appearing simply because we've yet to run the Farm Config wizard? Regards, Paul NOTICE - This communication is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking any action in reliance on, this communication by persons or entities other than the intended recipient is prohibited. If you are not the intended recipient of this communication please delete and destroy all copies and telephone SMS Management Technology on 1300 842 767 immediately. Any views expressed in this Communication are those of the individual sender, except where the sender specifically states them to be the views of SMS Management Technology. Except as required by law, SMS Management Technology does not represent, warrant and/or guarantee that the integrity of this communication has been maintained nor that the communication is free from errors, virus, interception or interference. inline: image001.gif___ ozmoss mailing list ozmoss@ozmoss.com http://prdlxvm0001.codify.net/mailman/listinfo/ozmoss
