Quantcast
Channel: SharePoint 2013 - Setup, Upgrade, Administration and Operations forum
Viewing all articles
Browse latest Browse all 21070

App Pools only work when using Farm account

$
0
0

Help! I followed the following guidelines to create our SharePoint 2013 service accounts:


Account name

Role

Domain rights

Local SharePoint Server rights needed

SQL rights needed

sp_install

Used to install SharePoint binaries.

Domain User

Local administrator on all SharePoint boxes

dbcreator and securityadmin SQL roles

sp_farm

Farm account. Used for Windows Timer Service, Central Admin and User Profile service

Domain User

Local Admin during UPS provisioning, log on locally right

None

sp_webapp

App pool id for content web apps

Domain User

None

None

sp_serviceapps

Service app pool id

Domain User

None

None, unless using Office Web Apps. Them must give access to content databases manually

sp_search

Search process id

Domain User

None

None

sp_content 

Account used to crawl content

Domain User

None

None

sp_userprofile<sup>1</sup>

Account used by the User Profile services to access Active Directory

Must have Replicating Change permissions to AD. Must be given in BOTH ADUC and ADSIEDIT. If domain is Windows 2003 or early, must also be a member of the "Pre-Windows 2000" built-in group.

None

None

sp_superuser<sup>2</sup>

Cache account

Domain User

Web application Policy Full Control

Web application super account setting

None

sp_superreader<sup>2</sup>

Cache account

Domain User

Web application Policy Full read

Web application super reader account setting

None

And I followed this article as well:

http://technet.microsoft.com/en-us/library/cc263445(v=office.15).aspx

However, none of my service  app pools, or web app pools will work under any accountbut the Farm account. If I navigate to Security-->Configure service accounts and select an account other than the Farm account for my service or web app pools, then the server returns a "service is unavailable" error and the the app pool stops in IIS. 

I have registered all the accounts, I double -checked the accounts in AD, but nothing works. So currently I have everything running under the Farm account, and of course, the health analyzer is complaining. I have verified everything I know of so far and i'm not sure what the problem is at this point. 

Thank you for any suggestion you may have!


A. Fagan



Viewing all articles
Browse latest Browse all 21070

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>