none
SharePoint 2010 Health Analyzer Alerts to SPTimerService (SPTimerV4)

    Question

  • Hello.. I need some people

    SharePoint 2010 Setup {Web Front + App Server + DB Server}. I have pasted all the alerts I am seeing on the Health Analyzer and they are all pointing to SPTimerService (SPTimerV4). Service is using SP_Farm Account.

    What are we doing wrong?? Any help will be great.

    Thanks

    -Davinder 

    ----------

    Alerts:

    Title

    Accounts used by application pools or service identities are in the local machine Administrators group.

    Severity

    2 - Warning

    Category

    Security

    Explanation

    Using highly-privileged accounts as application pool or as service identities poses a security risk to the farm, and could allow malicious code to execute. The following services are currently running as accounts in the machine Administrators group: SharePoint Central Administration v4 (Application Pool)
    FIMSynchronizationService(Windows Service)
    SPTimerV4(Windows Service)
    WebAnalyticsService(Windows Service)

    Remedy

    Browse to http://app1/_admin/FarmCredentialManagement.aspx and change the account used for the services listed in the explanation. For more information about this rule, see "http://go.microsoft.com/fwlink/?LinkID=163445".

    Failing Servers

    APP1
    WEB1

    Failing Services

    SPTimerService (SPTimerV4)

    ---------------------------------------------

    The server farm account should not be used for other services.

    Severity

    1 - Error

    Category

    Security

    Explanation

    company\sp_farm, the account used for the SharePoint timer service and the central administration site, is highly privileged and should not be used for any other services on any machines in the server farm. The following services were found to use this account: User Profile Synchronization Service(Windows Service)
    Web Analytics Data Processing Service(Windows Service)

    Remedy

    Browse to http://app1/_admin/FarmCredentialManagement.aspx and change the account used for the services listed in the explanation. For more information about this rule, see "http://go.microsoft.com/fwlink/?LinkID=142685".

    Failing Servers

    Failing Services

    SPTimerService (SPTimerV4)

    ------------------------------------

    Title

    Built-in accounts are used as application pool or service identities.

    Severity

    2 - Warning

    Category

    Configuration

    Explanation

    Using built-in accounts like Network Service or Local System as application pool or as service identities is not supported in a farm configuration. The following services are currently running as built-in identities on one or more servers: SPTraceV4(Windows Service)
    SPSearch4(Windows Service)

    Remedy

    Browse to http://app1/_admin/FarmCredentialManagement.aspx and change the account used for the services listed in the explanation. For more information about this rule, see "http://go.microsoft.com/fwlink/?LinkID=142699".

    Failing Servers

    Failing Services

    SPTimerService (SPTimerV4)


    Monday, March 28, 2011 7:41 PM

Answers

  • Farm account need not be in local administrators group on any servers in sharepoint farm, from error message it looks like the farm account is member of admin group, another note timerservice needs to run under farm account

    There is a bug in health analyzer alerts, it complains about User Profile Synchronization Service using farm account, user profile synchronization service must run under farm account and you should just ignore that alert


    Microsoft Certified Master | SharePoint 2007
    Blog
    Tuesday, March 29, 2011 5:32 AM

All replies

  • You can use separate account for following services:

    • SharePoint Central Administration v4 (Application Pool)
    • FIMSynchronizationService(Windows Service)
    • SPTimerV4(Windows Service)
    • WebAnalyticsService(Windows Service)

    Please check Services (service.msc), Identity property inside IIS server and then configure Service Account (Central Administrator > Security > Configure service account).

    Can you describe accounts that you use for SharePoint environment?

    Some useful information for you:

    Regards.


    SharePoint in Vietnam Blog: The SharePoint diary
    Tuesday, March 29, 2011 1:28 AM
  • Farm account need not be in local administrators group on any servers in sharepoint farm, from error message it looks like the farm account is member of admin group, another note timerservice needs to run under farm account

    There is a bug in health analyzer alerts, it complains about User Profile Synchronization Service using farm account, user profile synchronization service must run under farm account and you should just ignore that alert


    Microsoft Certified Master | SharePoint 2007
    Blog
    Tuesday, March 29, 2011 5:32 AM
  • Hello Ram,

    Thanks for replying back.. Based on the suggestion above. By taking the farm account of local administrator group - took care of one health analyzer "Accounts used by application pool ..

    But is a solution for this health analyzer - based on the error message I looked at:

    •  SharePoint 2010 Tracing - it's running on "Local Service"
    • SharePoint Foundation Search V4 -- it's "Disabled" - "local service"
    • SharePoint Server Search 14 -- it's "Disabled" - "local service"

    DOES THESE SERVICE NEED TO RUN ON FARM ACCOUNT ?? OR ?

    Is there a fix out there they will take care of the bug in the health analyzer alert complaning about User Profile??

    Appreciate all your help

    -Davinder

    -----------------------

    Title

    Built-in accounts are used as application pool or service identities.

    Severity

    2 - Warning

    Category

    Configuration

    Explanation

    Using built-in accounts like Network Service or Local System as application pool or as service identities is not supported in a farm configuration. The following services are currently running as built-in identities on one or more servers: SPTraceV4(Windows Service)
    SPSearch4(Windows Service)

    Remedy

    Browse to http://app1/_admin/FarmCredentialManagement.aspx and change the account used for the services listed in the explanation. For more information about this rule, see "http://go.microsoft.com/fwlink/?LinkID=142699".

    Failing Servers

    Failing Services

    SPTimerService (SPTimerV4)

    --------------------------

    Title

    Missing server side dependencies.

    Severity

    1 - Error

    Category

    Configuration

    Explanation

    [MissingWebPart] WebPart class [8d6034c4-a416-e535-281a-6b714894e1aa] is referenced [1] times in the database [SP2010_PESIntranet_Content], but is not installed on the current farm. Please install any feature/solution which contains this web part. One or more web parts are referenced in the database [SP2010_PESIntranet_Content], but are not installed on the current farm. Please install any feature or solution which contains these web parts.

    Remedy

    For more information about this rule, see "http://go.microsoft.com/fwlink/?LinkID=142689".

    Failing Servers

    Failing Services

    SPTimerService (SPTimerV4)


    Tuesday, March 29, 2011 3:08 PM
  • Thuan soldier is tellig very correct only services problem Work for me thanks Thuasn 
    Thursday, February 16, 2012 11:33 AM