Hi all,

I've got a SP2013 site but according to the health analyser and failing search results and errors trying to laucnch various services (like visio and a few BI things) its got quite a few issues.

The two obvious ones are "farm account should not be used for other services" and "accounts used by application pools or service identities are in the local machine administrators group - failingserverNAME(S))

Best I can tell is that the guidance hasn't been followed in installing the system and while there are several separate accounts, things like the farm administrator account is plugged into the core service account and several other things that isn't best practice. Most likely scenario I can come up with is that the installer account has been used to do almost everything and left that way somehow... can you just change a few things in Central Admin or other place and fix this without breaking everything or is there more to this...?

The ULS logs also report an awful lot of warning -> critical issues, which being fairly new to this is overwhelming me... but doesn't seem like a good thing...

Is this setup fixable or not worth the effort of repairing and a new install and migration of data is in order?

But I'm only new to this stuff, so bear with me if I'm heading in the 100% wrong direction.

Any thoughts or advice apprec

Hi,

As I understand, you encountered some errors about account in SharePoint 2013.

You could configure the account for these services which have the error. You could go to Central Administration -> Security -> Configure Service Accounts, in the Credential Management section, select the services that have the error, select the service account for the service, and you also could create a new service account for the service.

If it cannot work, you could change the service account for the service by PowerShell. For more detailed information, you could refer to the article below.

The article below is about the server farm account should not be used for other services.

http://jpwaldin.com/blog/?p=285

More reference:

The article below is about Accounts used by application pools or service identities are in the local machine Administrators group (SharePoint 2013).

https://technet.microsoft.com/en-us/library/hh344224.aspx

Best regards,

Sara Fan