Can someone shed light on exactly why the install account needs the sysadmn role on the SQL Server?
1) is it only needed during the install process and subsequently removed?
2) or...does the account that is running the ForeFront service 'simply' need access to the SharePoint databases? e.g. the Farm account?
-Jim