none
c2wts - Windows Service account SharePoint Server 2010

    Question

  • Hi all!

    Using a NTLM setup on my SharePoint 2010 Farm (3 SharePoint servers), i get the SharePoint Health Anazlyser message:

    Built-in accounts are used as application pool or service identities:

    Using built-in accounts like Network Service or Local System as application pool or as service identities is not supported in a farm configuration.  The following services are currently running as built-in identities on one or more servers:

    c2wts(Windows Service)

    The Service uses Local System.

    How do I get rid of this message in a safe and good way?

    I know I should create a domain account, but what are the least rights it will need to function?

    Is it enough with:

    • act as part of operating system
    • log on as service
    • impersonate client after authentication

    ?

    hope someone can shine some light on this.

    brgs

    Bjorn



    Tuesday, October 08, 2013 10:28 AM

Answers

  • From what I've read and heard it seems that as long as you dont use Kerberos, SPN BI, you dont have to configure SPN and Rights when setting this service to a domain account.

    Tuesday, October 08, 2013 11:33 AM