MOSS 2007 Service Account Setup

Summary of Issue

THIS PAGE IS A WORK IN PROGRESS.

Service accounts run SharePoint Server 2007.  By implementing proper service accounts from the beginning troubleshooting the server later will be much less of a nightmare.

Methods to resolve the problem

Create the following Service Accounts with the noted permission.

1. labdbadmin (Domain Admin) – SQL Server 2005 Service Account
2. sp_svc_install:  Member of the administrator group on each Web front-end (WFE) server and application server computer in the farm. Member of the following SQL Server groups with SQL Security Administrator and Database Creator rights on SQL servers.
3. sp_svc_config:  Automatically assigned permissions
4. sp_svc_search: Automatically assigned permissions
5. sp_svc_crawl:  Automatically assigned permissions
6. sp_svc_ssp_search:  Automatically assigned permissions
7. sp_svc_ssp_pool:  Automatically assigned permissions
8. sp_svc_ssp:  Automatically assigned permissions
9. sp_svc_ssp_access_accout:  Automatically assigned permissions

Sources

• creagan: MOSS Setup / Service Accounts
• Accountalanche! MOSS 2007 Service Accounts Walkthrough With Pictures
• Microsoft: Plan for administrative and service accounts (Office SharePoint Server)
• https://mhprofessional.com/downloads/products/0071493271/0071493271_chap04.pdf
• Faraz Kahn: MOSS 2007 Service Accounts
• How to change service accounts and service account passwords in SharePoint Server 2007 and in Windows SharePoint Services 3.0.
• NO! Your SharePoint Farm Account does NOT need local admin privileges. So don’t give it them!