4

what account do you run the SharePoint 2010 Timer Job service under?

Do you use the farm account or a separate one or just local service?

Currently I use the farm account but the health analyzer says, it's not a good idea to use an account that has local administration permissions.

Regards, Alex

Robusto
  • 31,447
  • 8
  • 56
  • 77
eXXL
  • 6,548
  • 3
  • 19
  • 7
  • Sorry to dig up an old post but I felt it necessary to add a comment here: the farm account does NOT require local administration permissions (aside from during UPS provisioning) - that is the issue that the health analyser is flagging. – Benjamin J Athawes Aug 14 '11 at 14:17

2 Answers2

4

Technet - Account permissions and security settings (SharePoint Server 2010)

See Farm service account

The server farm account is also referred to as the database access account and is used as the application pool identity for Central Administration, and as the process account for the Microsoft SharePoint Foundation 2010 Timer service. The server farm account requires the following permissions:

Ryan
  • 23,871
  • 24
  • 86
  • 132
2

The timer service needs access to the databases. That's the main thing. There's a separate service (SPAdminV4) which is used for local-admin operations. This approach keeps the vast majority of the code away from admin privileges. So yes, you really do want to use a different account for security reasons.

James
  • 218
  • 1
  • 4