Hi there

Apologies if this is a stupid question, but I've installed the SM Portal following advice on various articles, and they all seem to say to run the portal app pool as the Service Manager service account. This account is also required to be a local admin on the service manager server. Isn't this a bit insecure or am i missing something? If anyone knows how to run it as another account with less permissions, then that would be great.

Many thanks

Amy

Hi,

The SCSM service AD account must be added to local Administrators Group on on all machines as it is used to perform the installation : SharePoint Server , SQL Server and Content Server.

In my opionion, the account used to install portal should have permissions for service manager database, and also DW database.

The best way should be use the service account, and I didn't find any official document regarding to this, and most articles use service account to install portal.

Regards,

Yan Li

Yeah I guess I'll just have to stick with using the service account. It doesn't seem to fit very well with the least permissions model but we can tighten security around it anyway.

Thanks again

Amy