4

Per best practice, I created Windows user and added to the Administrators group (sp_admin) to install SharePoint 2010 and installed the product under that account.

However, after running the Configuration Wizard and logging in to Central Administration using the administrative privileges for the created, I have no ability to add service applications due to lack of permissions nor does the UI show the Central Administration wizard.

When I log in to the server with the default administrative user (Administrator), I CAN, even though no part of the product was installed under that account.

What am I missing?

|improve this question
  • Did you ever resolve this? – Seth Jun 18 '12 at 12:02
  • I didn't. As background, I was installing a single server farm into a VM, which is fraught with all types of problems and gotchas. I would avoid doing so if I had to do it again. – mmcglynn Jun 18 '12 at 19:43
1

Is your sp_admin user local administrator? The installation account should be local admin on all SharePoint servers.

|improve this answer
  • Yes, and I updated my question to reflect this fact more clearly. – mmcglynn Sep 29 '11 at 17:26
1

If the sp_admin account is the account you used to install SharePoint, then it would have the required access. Based on the situation you described it sounds like the Administrator account was used.

|improve this answer
1

Is the sp_admin account the farm account? (in the farm admin group?)

The current best practices I have seen refer to using a sp_admin account for installation and updates/patches and using a separate account as the farm admin (e.g. sp_farm).

You would install with sp_admin (which has local admin privileges on the server) and during the post install config wizard specify sp_farm as the farm account.

The sp_farm account should then be able to add Service Applications and use Central Admin GUI features.

I think by default the local admins group on the server are given farm admin permissions, and it is best practice to remove that group from the farm admins group after configuration an sp_farm account and adding any named users that you want to be farm admins.

So it sounds like you didn't add a sp_admin to farm admins, you should add a sp_farm (or whatever your naming convention is) account as farm admin and your local Administrator account is a farm admin since it is a member of the local administrators group that is given farm admin permissions by default.

|improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.