2

I just encountered a SharePoint Foundation farm where it is installed by using Local admin account. The whole farm and its SharePoint service are running either by Local service, Local system or specifically by that local admin account.

Now I need to change with a dedicated domain account, say SharePoint Admin account.

As it is a production server I little hesitating to change it.

Can any one suggest where all I need to make change this service account !! and is there any risk in changing at any place !!

Improve this question
3
  • You can add service accounts in Central administration and manage accounts for services and app pools from Central Administration. You can get manage service accounts link under Security tab.
    – Dikesh Gandhi
    Commented Nov 28, 2016 at 9:04
  • I tried to change the service account in Central Administration but it is not picking up the domain account...
    – cjs
    Commented Nov 28, 2016 at 9:31
  • Have you added your sharepoint machine in the domain?
    – Dikesh Gandhi
    Commented Nov 28, 2016 at 9:33

1 Answer 1

Reset to default
1

Yes, there's a risk , and it will require outage , so it's heavily recommended to try this in your test environment before implementing in your Production environment.

Meanwhile, you will need to change the following services accounts to the new farm account

  1. Farm account in Service account
  2. Service Application Pool - Security Token app pool service account.
  3. Service Application Pool – Sharepoint Web application app pool service account.
  4. Windows Service – Microsoft SharePoint Foundation Sandboxed Code Service (if you already start it)
  5. Windows Service – User Profile Synchronization Service (if you already configure it)

To do this , apply the following steps :

  • Create a new domain user.
  • In SQL server , Provide this user a dbcreator server role, and the SQL Server securityadmin server role.
  • Add the new domain user to Managed Account in Central Administration > Security > General Security > Configure managed accounts

enter image description here

  • Go to Security –> Configure Service Accounts.

enter image description here

  • Select Central administration and set the new domain farm account.

  • repeat the previous step for web application app pool and Security Token app pool.

  • Run the following command to update farm credentials

stsadm –o updatefarmcredentials –userlogin "[DOMAIN\USERNAME]" –password "[PASSWORD]"

  • In Local users and groups, Add the new farm account for this following groups in

    • WSS_WPG
    • WSS_ADMIN_WPG

  • Perform iisreset

Note :

For more steps check

Improve this answer
2
  • Thanks for your detailed response, but When I am trying to change Service Accounts. SharePoint is not taking any other account, mean it is not recognising Domain Account !
    – cjs
    Commented Dec 2, 2016 at 3:40
  • you are welcome by bro , this because any service account should be domain user and added to managed account , so add it in Security > General Security > Configure managed accounts > add the service account , please don't hesitate to tell me if you need any calarafication :)
    – Mohamed El-Qassas MVP ♦
    Commented Dec 2, 2016 at 9:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.