Which account to use for scheduling SharePoint 2010

In which account did you start the SharePoint 2010 timer job service?

Are you using a farm account or a separate or local service only?

I am currently using a farm account, but the Health Analyzer says it is not recommended to use an account with local administration permissions.

Regards, Alex

+4
source share
2 answers

Technet - Account Permissions and Security Settings (SharePoint Server 2010)

See Farm Account

The server farm account, also called account database access, is used as the pool identifier application for Central Administration, and as the account process for the Microsoft SharePoint Foundation 2010 Timer. The server farm account requires the following permissions:

+4
source

The timer service needs access to databases. This is the main thing. There is a separate service (SPAdminV4) that is used for local administrator operations. This approach allows the vast majority of code to waive administrator privileges. So yes, you really want to use a different account for security reasons.

+2
source

Source: https://habr.com/ru/post/1316301/


All Articles