Change the Timer Service Account

I did an install with Sharepoint 2010 RTM and have it working well but when I checked the Monitoring - Review Problems and solutions it states a security concern that the Farm Account should not be used for other services.  At this stage I have to change out the timer service since it is using the farm account.  But I don't see the timer service in the "Security - Manage service Accounts" location.  I created a timer account with no problems but how does one go about changing the timer service to use this account?  I know I can go to services and change it there but I am wondering if there is a need to do this within Sharepoint?  Am I missing a credential management piece that did not show up in the list of services? Any help would be appreciated Workerbee09  By the way, The problem points to a failing service SPTimerService (SPTimerV4) but its started and working cause I can see services being started and history of the service where it was successfull. 

Followed this guide: http://support.microsoft.com/kb/832770 I have setup my account SPadmin to have access to my SQL DB i went into IIS and attempted to change it there for my Default sharepoint site in the applications pool page > Properties>Identity Nada, i changed it his apply reset IIS and back to my old account(very frustrating) so further reading showed attempting to change it via Central administration.   Went there and chose Operations>Service accounts chose my webservice,Application pool and configurable and setup my SPadmin, reset IIS and still no change.   Thoughts? i feel like there is  some stupid step i'm missing because it will not change regardless.   Thanks Steve K

I associated User Profile Synchronization Service with managed account "svcebrd" in CA. For some reason this created duplicated managed account. Now there are two "svcebrd" under Configure Managed Account. If I try do delete one of the accounts in CA I get "key has already been added in dictionary". Running Remove-SPManagedAccount fails with "The account Dev\svcebrd is still being used by ... User Profile Syncronization Service".

Does anybody know powershell command to changed service application account?

 

Hi,

I changed on the SQL Server service account to a least priviledge domain user.  However after the change, one of my sqljob which use sp_send_dbmail is not functioning. after checking on the log, it mentioned no permission. i tried to set the MSSQLUser Group as db_owner of msdb database, but it was not helping. When i set the MSSQLUser group as sysadmin ,then only the job able to send email. what could be the least priviledge of the service account so that i able to send email via sql job?

I have setup a new SharePoint 2010 setup. Created Search Service application and configured. Confirmed that the crawl went fine without any error for both Local site and a file share. In the Search application i confirmed that the All Site scope shows 3890 items.

ISSUE: If any of the user [including site collection administrator] browses the site and try to search something it does NOT show result [No error either it says We did not find any results for .....]. All Site scopes does not show 3890 items but only 28.

But if the timer service account [system account] logs in the site and does the search it works fine.With this account loggd in if i check the All Site scopes i do see 3890 items.

This does seems to be some thing to do with the permission, but i am not able to get hint where the mistake is.

I have done the follow till now.

> I checked the application association is correct
> Created a new web application and confirmed that the issue exists there as well
> Checked ULS log but dont see any error related to this.
> No relavent event id in Application event viewer

Please help

---

Regards Ram

Hi,

I change service account for user profile service application from spfarm to spservice . and then FIM Synchronization Service is stopped and i found this error in event viewer.

"The server encryption keys could not be accessed.

User Action

Verify that the service account has permissions to the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Forefront Identity Manager\2010\Synchronization Service

If the problem persists, run setup and restore the encryption keys from backup."

But i tried to set the permission for spservice in registry. Still can't start the FIM Synchronization Service and also the log on as "Account" is changed to spservice .

When I change to spfarm for User Profile Service Application, it is working fine.

Please advise me that what do i need to configure for spservice ?

Thanks.

---

kmhsad

Hi I have a web service (asmx). I want to add a functionality where in I have to do polling for data on a URL. I added a timer and in the timer elapsed event handler I am checking for the data. Is it a good design? Is there something better than timer for this in ASP.NET? I have a issue with this where in the site / IIS goes in ideal state because of no requests, I have posted it in other forum on how to solve this problem. What I wanted to verify is that, use of timer is a valid thing for my use case, or I should go for some other approach? Will it be too heavy operation for the service to have a timer of 5 minutes interval running in over there, which will be running for the lifetime of this application.  

Hi @ all   I installed two SQL Server 2008 on Server 2008 R2 Std (principal and mirror) and an AD Server 2008, with sperate service accounts, connect as SA, localy all works fine. I created some agent tasks (PowerShell, T-SQL), but I get some Error massages in the history, that service account of SQL Agent didn't have the permission to query a remote machine(access denied for wmi (HRESULT: 0x80070005 (E_ACCESSDENIED)) and linked database(SQLSTATE 42000 Error(7314)). The simple query with SA permissions on the remote machine works and the powershell scripts with the local domain user works too. But not with the SQL Agent. WHY?? Where ist the different between the user account permisions and service account permissions? Which settings are needed? Example: get-wmiobject -class win32_service -computername 192.168.xxx.xxx| where {$_.name -like '*SQL*'} Powershell Console: works                                     SQL Agent Job: access denied I tried some solutions with user rights, group policies and security permissions but nothing works. like: Configuration -Service Accounts, SQL Server or SQL Server Agent service account http://support.microsoft.com/kb/283811/en-us http://msdn2.microsoft.com/

Hello, How can I get the Service Account name for the SQL Agent service for a particular SQL Server (SQL 2005). Is that possible to get using SQL statements? Thanks, Prabhat

I followed this guide here (http://www.harbar.net/articles/sp2010ups.aspx) to provision the UPS service in sharepoint 2010. I found the guide very helpful and informative. Everything is working correctly except for the write back to AD I've followed the steps and have assigned the listed permissions to the UPS service account, however I still get permissiong errors in the FIM GUI Our AD is running in a 2008 environment but is in 2003 mode, so I made sure to add the UPS account to Pre Windows 2000 Compatible access built in group and restart the server so that the new group settings would take affect. Do I need to reprovision the UPS service or something? Or am I missing something completely. (Hopefully the latter lol!) Thanks RKB