This document discusses various account requirements for SharePoint 2010 including: - SQL Server account to run SQL Server - Setup account for installation and initial configuration - Farm account for configuring and managing the farm and services - Various application pool and service accounts It also covers disabling CRL checks, Kerberos authentication configuration, and trimming the audit log.

1. SPS Baltimore

2. Dan Usher
Lead Associate
Booz Allen Hamilton
dan@spdan.com
http://www.sharepointdan.com
@binarybrewery

4. http://www.yammer.com/spyam
dan@spdan.com

13. SourceSeanMcDonough@spmcdonough

24. Manage the Recycle Bin of a site (Office.com)

27. Capacity requirements for the Web Analytics Shared Service in SharePoint Server 2010

28. Dataset Characteristics Value
SharePointcomponents 30k
Unique users 117k
Unique queries 68k
Unique assets 500k
Reporting DB data size? 200 GB day -> 73 TB year -> 511 TB
for 7 years
Capacity requirements for the Web Analytics Shared Service in SharePoint Server 2010

30. > $webApp = Get-SPWebApplication("http://intranet.contoso.com")
> $webApp.AllowedInlineDownloadMimeTypes.Add("application/pdf")
> $webApp.Update()

36. KB896861
DisableLoopbackCheck & SharePoint: What every admin and developer should know

38. TechNet
CodePlex
> $passphrase = ConvertTo-SecureString -asPlainText -Force
> Set-SPPassPhrase -PassPhrase $passphrase -Confirm

39. <psuedocode>
if (!server.HasInternetConnectivity()) {
server.DisableCRLCheck();
}
</psuedocode>
Certificate Revocation List Check and SharePoint 2010 without an Internet Connection
SOFTWAREMicrosoftWindowsCurrentVersionWinTrustTrust ProvidersSoftware Publishing

42. Account Purpose Requirements
SQL Server Runs SQL Server • Domain user account
• No rights in SharePoint
Setup Account Installs the bits and performs initial
configuration
• Domain user account
• Member of Local Admins on each server
in the farm
• securityadmin and dbcreator on SQL
instance
Farm Account Used for configuring andmanaging
the farm and runs primaryservices
(e.g. SPTimerV4)
• Domain account
• Additional rights are automatically
granted as part of installation (both
server and SQL)

43. Account Purpose Requirements
MySites Application
Pool
Worker process identity for MySites • Domain user account
• Managed account
Content Application
Pool
Worker process identity for Content web
applications
• Domain user account
• Managed account
Services Application
Pool
Worker process identity for Service
Application Pools
• Domain account
• Managed account
Search Service Process Process identity for SharePoint Foundation
(Help) search service and SharePoint
Search service
• Domain account
• Managed account
Search Service Default
Content Access
Used to crawl content specified in content
sources
• Domain account
User Profile Import
Account
Account used to import (and optionally
export) user data from an identity store
• Domain account
• Replicate Directory Changes in AD

44. Account Purpose Requirements
Object Cache Super
User
Processes items in the object cache of
a web application
• Domain user account
• Managedaccount
• Full Control User Policy on target web
application(s)
Object Cache Super
Reader
Processes items in the object cache of
a web application
• Domain user account
• Managedaccount
• Full Read User Policy on target web
application(s)

46. HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindows NTRPC
HKEY_USERSAccountSIDSOFTWAREMicrosoftWindowsCurrentVersionWinTrustTrust
ProvidersSoftwarePublishing

49. Configuring Kerberos Authentication for Microsoft SharePoint 2010 Products

50. stsadm -o trimauditlog –date 20120502 –databasename SP2010_Content_TRISPUG

56. dan@spdan.com
@binarybrewery
www.sharepointdan.com