帮助本地管理员组中的SharePoint服务帐户 [英] Help with SharePoint Service Accounts in Local Administrators Group
问题描述
SP 2010配置的新功能，希望获得有关帐户设置方式的一些信息.我正在审查以前的SP 2010服务器安装，并注意到以下帐户属于服务器的本地管理员组.有人告诉我 这些是托管服务帐户"，但我认为它们都不应该全部属于此组.服务器上的本地管理员组应具有有限的帐户. 赞赏反馈.
New to SP 2010 configuration and wanted to get some information on how accounts are setup. I am reviewing a previous SP 2010 sever install and noticed that the following accounts were part of the server's local administrators group. I was told these are "Managed Service Accounts", but I do not believe they should all be in this group. The local administrator group on a sever should have limited accounts. Appreciate feedback.
- RW_SQLSVC
- SP_ProdFarm
- sql_prodsp
- SQLPrimary
- RW_SQLSVC
- SP_Global
- SP_ProdFarm
- SPAdmins
- sql_prodsp
- SQLPrimary
推荐答案
唯一必须在Local Administrators组中的帐户是User Profile Synchronization Service帐户.这将永远是Farm Admin.只需在运行UPSS的服务器上成为本地管理员即可.
The only account that must be in the Local Administrators group is the User Profile Synchronization Service account; this will always be the Farm Admin. And it only needs to be a Local Admin on the server where UPSS is running.
可能的例外是向Windows令牌服务声明"帐户，如果您正在运行C2WTS(大多数人不需要它，它通常在Excel Calc Services和/或PowerPivot/View中用于商业智能方案).
The possible exception is Claims to Windows Token Service account, if you're running C2WTS (most people don't need it, it is used in Business Intelligence scenarios, generally with Excel Calc Services and/or PowerPivot/View).
这篇关于帮助本地管理员组中的SharePoint服务帐户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
