We have a new 2010 Environment. Ran through quick on our install.. with the likely intention of having to do it again anyways. To keep thing simple, only have two service accounts. The farm admin is the same user for all services. We also let the wizard create all of our services.
Yeah, I've read all the posts about needing 9 accounts per environment. wow.. and how not to let the Wizard create services and web aps and pools automatically. I've heard this can hurt us if one account is compromised and that can lead to accidents. But also think having to manage and carry all those accounts does introduce some security risk too. Also, I understand all those accounts can complicate powershell and maintenance. Also, understand that wizard created services and database will take weird names and not go on seperate web app pools. So what?
Environment is up and all services are up with the same farm admin user. We have one other AD user for safe reading of sharePoint content.
How bad is our configuration like this and where is this going to bite us?
If we want to fix this, can it be done without a complete reinstall. Anybody undo the wizard and split out AD accounts after the fact? How bad to do this?