when we create new farm the server local administrators accounts users are farm administrators as BuilIN\Administrators

-When i check local administrators there is Domain/Domain Admins Is if we remove this BuilIN\Administrators there is any risk to the sharepoint farm?

Is this required by sharepoint farm functionality or if we remove it is there any issues ?


When you install (or upgrade) SharePoint on a server, the SP_Install account have to be a local administrator on the server. Preferably in the group Local Admins. When install (or upgrade) is finished, you can safely remove SP_Install from the local admin group.

| improve this answer | |

As per my experience, you need a service account in local admin on sharepoint servers, in order to do daily maintenance, powershell execution, applying patches etc

As my experience, we have farm admin always in the local admin account.

Many best practices recommended have a separate account for installation and dedicated account for farm admin. Once installation complete then remove the install account from local admin

| improve this answer | |
  • yes domain admins also farm admins , if we remove builtin\administrators there is any issue to the farm? – adilahmed Oct 10 '16 at 11:40
  • If you add other accounts directly in the farms dmin group then you can remove it – Waqas Sarwar MVP Oct 10 '16 at 12:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.