I'm setting up a SP 2010 farm environment, where I want to configure the user profile synchronization (AD based).
After some difficulties resolved, I finally was able to make it works.
After that, the health analyser tells me it's bad to have services running with a user in the local administrator group. However, the setup guide tells me to add the user to the group.
In order to clarify, can you tell me what are the exact prerequisites of the user account for :
* the service User profile synchronization service (same as farm admin service) ? On my farm, domain\spadmin by now
* the instance of the user profile synchronization application ? On my farm, domain\spusersync
I've granted on the domain (w2K3 domain) all required permissions to write properties on both accounts (spadmin and spuser).
What are the next steps ? as my profile synchronization is set up, can I simply remove the user from the local admin group ?
thanks for clarifications,
Paying back the community for its help by writing articles :
Have a Nice Day.Net Blog
View Complete Post