How to allow domain admin access to Central Admin
-
Friday, May 25, 2012 12:25 AM
I've just installed SP2010 Enterprise, SQL 2008 R2 on Win2008 R2 Enterprise. I'm able to access the Central Administration site with the local admin account, but can't get in using the domain admin account. (server is part of domain)
All Replies
-
Friday, May 25, 2012 2:15 AMYou can add the domain admin to the local administrators group or you can go to Site Settings->Permissions and add the user over there.
Ameet Phadnis (Alexander Open Systems)
-
Friday, May 25, 2012 6:15 AM
By default, only local administrators and the farm account have permissions on Central Administration.
If you want grant access to all domain admins, open Central Admin with your local admin, then go to:Security -> Manage the farm administrators group. Click New. Then Add "Domain Admins".
Nico Martens - MCTS, MCITP
SharePoint 2010 Infrastructure Consultant / Trainer

- Proposed As Answer by Dirk Van den Berghe Friday, May 25, 2012 10:21 AM
- Marked As Answer by Carltonw1 Friday, May 25, 2012 1:48 PM
- Unmarked As Answer by Carltonw1 Friday, May 25, 2012 1:59 PM
- Unproposed As Answer by Steven AndrewsEditor Monday, May 28, 2012 4:06 PM
-
Friday, May 25, 2012 7:24 AM
you can loggin into CA using the Local account
add the domain account in farm administrators group and you can configure the account as service account so account would have service account privileges
more information
http://blogs.msdn.com/b/russmax/archive/2010/01/08/changing-sharepoint-2010-service-accounts.aspx
http://technet.microsoft.com/en-us/library/ee662513.aspx
http://technet.microsoft.com/en-us/library/cc678863.aspx#Section2
hope so this helps
- Marked As Answer by Rock Wang– MSFT Friday, June 01, 2012 8:54 AM
-
Friday, May 25, 2012 2:01 PM
I added the Domain Admins to the Manage the Farm Administrators group, but I'm still not able to get in using the domain admin account. I rebooted the server as well with no luck.
-
Friday, May 25, 2012 2:04 PM
You can specify a specific domain admin as well to test this. For instance, you can add domain\youradminaccount.
Are you sure the account you are trying to use is not locked out/password expired etc?
Nico Martens - MCTS, MCITP
SharePoint 2010 Infrastructure Consultant / Trainer

-
Friday, May 25, 2012 2:07 PMI did try adding the domain\adminaccount, but when I enter that it saves as "administrator". Our domain admin account password does not expire. II know the password is correct.
-
Friday, May 25, 2012 2:15 PM
What message are you receiving when you try to logging in with your admin account?
Are you receiving the default "Error: Access Denied" page? or are you receiving an other error?
Nico Martens - MCTS, MCITP
SharePoint 2010 Infrastructure Consultant / Trainer

-
Friday, May 25, 2012 2:17 PMNo error message, the login prompt pops back up again. After the third time the browser page goes blank.
-
Friday, May 25, 2012 2:20 PM
Some questions to help figure out what is going wrong:
- Are you using NTLM or Kerberos authentication?
- How are you accessing Central Admin (http://servername:someport)?
Nico Martens - MCTS, MCITP
SharePoint 2010 Infrastructure Consultant / Trainer

-
Friday, May 25, 2012 2:29 PM
I'm using Kerberos and yes I'm accessing Central Admin site with standard http and assigned port.
-
Monday, May 28, 2012 1:20 AM
I wasn't able to get this working with Kerberos. NTLM works out of the box.

