I am getting this error message in my SharePoint 2019 TEST Environment. the Explanation says Farm, the account used for the SharePoint timer service and the central administration site, is highly privileged and should not be used for any other services on any machines in the server farm. The following services were found to use this account:

  1. SharePoint Search Host Controller Service(Windows Service)
  2. SharePoint Server Search Service(Windows Service)
  3. Distributed Cache Service(Windows Service).

I can certainly change the service account for these services from my farm account to a different one, but i am not sure what are the minimum priviledges required for a service/managed account to run these three services.. can any one please help with letting me know what minimum permissions are required for a service account to run 1) SharePoint Search Host Controller Service(Windows Service) 2) SharePoint Server Search Service(Windows Service) 3) Distributed Cache Service(Windows Service).

1 Answer 1


From this article, the SharePoint Service Application Pool account must be a domain user account. This account must not be a member of the Administrators group on any computer in the server farm.

enter image description here

Also, the article lists recommendations for service accounts, you can have a refer on it.

  • thank u so much much appreciated
    – Bikram Pal
    Jan 3, 2023 at 18:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.