c2wts - Windows Service account SharePoint Server 2010 RRS feed

  • Question

  • Hi all!

    Using a NTLM setup on my SharePoint 2010 Farm (3 SharePoint servers), i get the SharePoint Health Anazlyser message:

    Built-in accounts are used as application pool or service identities:

    Using built-in accounts like Network Service or Local System as application pool or as service identities is not supported in a farm configuration.  The following services are currently running as built-in identities on one or more servers:

    c2wts(Windows Service)

    The Service uses Local System.

    How do I get rid of this message in a safe and good way?

    I know I should create a domain account, but what are the least rights it will need to function?

    Is it enough with:

    • act as part of operating system
    • log on as service
    • impersonate client after authentication


    hope someone can shine some light on this.



    Tuesday, October 8, 2013 10:28 AM


  • From what I've read and heard it seems that as long as you dont use Kerberos, SPN BI, you dont have to configure SPN and Rights when setting this service to a domain account.

    Tuesday, October 8, 2013 11:33 AM