Answered Security Question related to Proejct server

  • Monday, March 22, 2010 6:05 AM
     
     

    We are in the process of pilot testing Project server. Our IT department
    don't support any Project servers as we are doing pilot study.

    To run Share point server , SQL server , Project Server etc on a Single
    server I am creating a user on this server to run services. This user is a
    administrator on this server only and NOT part of domain . However this
    server is part of domain .

    All users who access Project server (Project members ) are part of Domain.

    1. Can I configure user on this server with admin previlages only on this
    server with out domain access rights?
    2. Do you anticipate any issues?

    3. I am planning to configure Windows Authentication. If so what needs to be done to validate users login
    credential as the local admin (which runs services) do not have domain account to validate users.


    Thank you

All Replies

  • Monday, March 22, 2010 12:38 PM
    Moderator
     
     

    Meetrams:

    You should use a domain account as your service account. Otherwise you'll have lots of problems.


    Gary Chefetz, MCITP, MCP, MVP msProjectExperts
    Project and Project ServerFAQs
    Project Server Help BLOG
  • Monday, March 22, 2010 3:08 PM
     
     

    Meetrams:

    You should use a domain account as your service account. Otherwise you'll have lots of problems.


    Gary Chefetz, MCITP, MCP, MVP msProjectExperts
    Project and Project ServerFAQs
    Project Server Help BLOG


    Hi Gary

     

    Thanks. The problem is I am a user part of Domain. I do not have domain account admin previlages on the domain controller. But I do have admin rights on this Project server. If I change the password (Which I need to do once in 6 months as security policy) this will affect the Services running on the project server. SO what is the best way to deal with this problem?

  • Monday, March 22, 2010 3:09 PM
     
     Answered

    Hello Meetrams:

    I am in absolute agreement with Gary, that you will have problems if you don't use domain services accounts. The simple solution would be to request a few domain accounts for your test environment.

    However, have you thought about setting up several virtualized servers on your test server?  Setup a AD server, SQL server and Project Server on your test server.  Here the testing can be isolated and y ou will learn more about the installation and setup.

    Good luck!

    Michael Wharton, MBA, PMP, MCT

    • Marked As Answer by meetrams Tuesday, March 23, 2010 12:10 AM
    •  
  • Monday, March 22, 2010 4:28 PM
    Moderator
     
     Answered

    Meetrams:

    You are in luck. Create your service account and make it a managed account in SharePoint, which will automatically change the password for you when the time comes. From SharePoint Central Administration, Select Security > Under General Security, select Configure Managed Accounts.


    Gary Chefetz, MCITP, MCP, MVP msProjectExperts
    Project and Project ServerFAQs
    Project Server Help BLOG
  • Tuesday, March 23, 2010 12:09 AM
     
     

    Meetrams:

    You are in luck. Create your service account and make it a managed account in SharePoint, which will automatically change the password for you when the time comes. From SharePoint Central Administration, Select Security > Under General Security, select Configure Managed Accounts.


    Gary Chefetz, MCITP, MCP, MVP msProjectExperts
    Project and Project ServerFAQs
    Project Server Help BLOG

    Thank you Gary You have given a solution. I appreciate.