changing Farm Admin from Local user to Domain user

sharepoint.stackexchange https://sharepoint.stackexchange.com/questions/200726

Domanda

I just encountered a SharePoint Foundation farm where it is installed by using Local admin account. The whole farm and its SharePoint service are running either by Local service, Local system or specifically by that local admin account.

Now I need to change with a dedicated domain account, say SharePoint Admin account.

As it is a production server I little hesitating to change it.

Can any one suggest where all I need to make change this service account !! and is there any risk in changing at any place !!

È stato utile?

Soluzione

Yes, there's a risk , and it will require outage , so it's heavily recommended to try this in your test environment before implementing in your Production environment.

Meanwhile, you will need to change the following services accounts to the new farm account

  1. Farm account in Service account
  2. Service Application Pool - Security Token app pool service account.
  3. Service Application Pool – Sharepoint Web application app pool service account.
  4. Windows Service – Microsoft SharePoint Foundation Sandboxed Code Service (if you already start it)
  5. Windows Service – User Profile Synchronization Service (if you already configure it)

To do this , apply the following steps :

  • Create a new domain user.
  • In SQL server , Provide this user a dbcreator server role, and the SQL Server securityadmin server role.
  • Add the new domain user to Managed Account in Central Administration > Security > General Security > Configure managed accounts

enter image description here

  • Go to Security –> Configure Service Accounts.

enter image description here

  • Select Central administration and set the new domain farm account.

  • repeat the previous step for web application app pool and Security Token app pool.

  • Run the following command to update farm credentials

stsadm –o updatefarmcredentials –userlogin "[DOMAIN\USERNAME]" –password "[PASSWORD]"

  • In Local users and groups, Add the new farm account for this following groups in

    • WSS_WPG
    • WSS_ADMIN_WPG

  • Perform iisreset

Note :

For more steps check

Autorizzato sotto: CC-BY-SA insieme a attribuzione
Non affiliato a sharepoint.stackexchange
scroll top