We have installed SharePoint 2010 Beta 2 on Win 2008 R2 and SQL Server 2008 SP1+CU2.
We have created service account as described in the following TechNet articlehttp://technet.microsoft.com/en-us/library/ee662513(office.14).aspx and following least privilege model.
After running the setup and finishing “SharePoint 2010 Products Configuration Wizard” using “Setup user account” the Central Administration web is up and running.
For further configuration we logged in with “Server Farm Account” and when we go to “Manage service applications” page the button to create new service application is disabled and if we hover over the disabled button it says “This control is currently disabled”. Same thing happens when we go to “Manage web applications” page and the “New” button on ribbon is disabled with same error message. We also could not see the “Launch the Farm Configuration Wizard” link under configuration wizard page.
Apparently when we login back as “Setup user account” we can see all the buttons activated and also the ability to launch the farm configuration wizard.
Is there some configuration or privilege we are missing for “Server Farm Account”.
The “Server Farm Account” was part of “Farm Administrators” group after the initial setup and configuration wizard. It was not in the “Site Collection Administrators” group for “Central Administration” site,
as expected it didn’t make any difference after having added it to the “Site Collection Administrators” group. If we add the “Server Farm Account” to the local administrator’s group thing starts to function as it should
have been but now it no more a least privilege model.
Is this the way it has to be operated? The setup user account is local admin on the box. So what’s the purpose of the “Server Farm Account” which doesn’t even have permission to create web applications?
Sameer Dhoot
My Blog : http://sharemypoint.in/