Security Token Service - which account and permissions should be?

Question

I would like to ask you about Security Token Service, in SharePoint Foundation. Default this service works on user who installed SP but I would like to change this account. Which permissions I have to add to account who will be service account for Security Token?

Thanks for help and support, Andrzej

Answer 1

I presume you are using WSS3.0 or newer so you require the Permission levels for this.

The office site has a good matrix you should keep bookmarked for this very thing.

Permission levels for WSS3.0

Making a new services account

If you are making a separate account for this then you need to give it in most cases full control for SharePoint.