Post comment as twitter logo facebook logo
Sort: Newest | Oldest
zerodamage 5 pts

Let me ask you this because I am having a difficult time deciding how to address it. I am using the 2.5 version of the autospinstaller script.  In the input config file, there is a part just for the user profile sync. As an example, I use the service account sp_profilesync. There is also the spservice account called sp_service that I created. Despite inputting the sp_profilesync into the input.xml file for the profile sync service, sharepoint is using the sp_service account when I go to the "Manage Service Applications" page on Central Admin. I see no reference to the Userprofile service in your table above with all of your service accounts. Can you tell me if it is okay to keep this or should I manually make the change? I am guessing I will need to set the sp_profilesync account with logon-as-service permissions in group policy as well.

wahidsaleemi 5 pts moderator

 zerodamage I have to guess here that you mean the "SyncConnectionAccount" under the "UserProfileServiceApp" node in the XML. If that's the case, it should be set to false and you can leave the account and password blank. Automatically creating the Profile Sync Connection is not supported. You can do this manually later by going into Manage User Profile Service and setting up a new Sync Connection. When doing so, it will ask for your account, and you can use the sp_profilesync account you created. That account does need special permissions in your directory (see: http://technet.microsoft.com/en-us/library/8451dde9-bbd1-4285-bc24-71bd795fb912#permission).

 

As far as the service itself, it does use the sp_service account when configured with AutoSPInstaller and you can leave it as-is. If you have more questions, you can always post on the project's discussion page here: http://autospinstaller.codeplex.com/discussions

leonzandman 5 pts

First you recommend people to fill in all passwords in the config file. Then you recommend people test the validity of their XML config file by running it through the w3schools.com XML validator. That doesn't sound very safe to me :-) For all we know w3schools.com is spying on the XML that they receive, so now they 0wn your passwords... :-)

wahidsaleemi 5 pts moderator

 leonzandman If it doesn't sound safe, you shouldn't do it, as with anything you find on the web. I hope my readers have the common sense to apply that advice.

 

For everyone else, a quick look at the page source for the XML validator reveals they're simply using the browsers object model to validate the XML, so nothing is ever stored.

Steve Reid 5 pts

great articles...  Should the Account Names in your reference list match the account names in the account names in the <ManagedAccounts> section?

wahidsaleemi 5 pts moderator

 Steve Reid Yes, they should, for the most part. You can have additional accounts, besides those that are in the <ManagedAccounts> section. But, the 4 accounts in the section should be used for their intended purpose. I should fix up my article to make that clear. Thanks!

Previous post:

Next post: