Answered How to allow domain admin access to Central Admin

  • Friday, May 25, 2012 12:25 AM
     
     

    I've just installed SP2010 Enterprise, SQL 2008 R2 on Win2008 R2 Enterprise. I'm able to access the Central Administration site with the local admin account, but can't get in using the domain admin account. (server is part of domain)

All Replies

  • Friday, May 25, 2012 2:15 AM
     
     
    You can add the domain admin to the local administrators group or you can go to Site Settings->Permissions and add the user over there.

    Ameet Phadnis (Alexander Open Systems)

  • Friday, May 25, 2012 6:15 AM
     
     

    By default, only local administrators and the farm account have permissions on Central Administration.
    If you want grant access to all domain admins, open Central Admin with your local admin, then go to:

    Security -> Manage the farm administrators group. Click New. Then Add "Domain Admins".


    Nico Martens - MCTS, MCITP
    SharePoint 2010 Infrastructure Consultant / Trainer
      

  • Friday, May 25, 2012 7:24 AM
     
     Answered

    you can loggin into CA using the Local account

    add the domain account  in farm administrators group and you can configure the account as service account so account would have service account privileges

    more information

    http://blogs.msdn.com/b/russmax/archive/2010/01/08/changing-sharepoint-2010-service-accounts.aspx

    http://technet.microsoft.com/en-us/library/ee662513.aspx

    http://technet.microsoft.com/en-us/library/cc678863.aspx#Section2

    hope so this helps

  • Friday, May 25, 2012 2:01 PM
     
     

    I added the Domain Admins to the Manage the Farm Administrators group, but I'm still not able to get in using the domain admin account. I rebooted the server as well with no luck.

  • Friday, May 25, 2012 2:04 PM
     
     

    You can specify a specific domain admin as well to test this. For instance, you can add domain\youradminaccount.

    Are you sure the account you are trying to use is not locked out/password expired etc?


    Nico Martens - MCTS, MCITP
    SharePoint 2010 Infrastructure Consultant / Trainer
      

  • Friday, May 25, 2012 2:07 PM
     
     
    I did try adding the domain\adminaccount, but when I enter that it saves as "administrator". Our domain admin account password does not expire. II know the password is correct. 
  • Friday, May 25, 2012 2:15 PM
     
     

    What message are you receiving when you try to logging in with your admin account?

    Are you receiving the default "Error: Access Denied" page? or are you receiving an other error?


    Nico Martens - MCTS, MCITP
    SharePoint 2010 Infrastructure Consultant / Trainer
      

  • Friday, May 25, 2012 2:17 PM
     
     
    No error message, the login prompt pops back up again. After the third time the browser page goes blank.
  • Friday, May 25, 2012 2:20 PM
     
     

    Some questions to help figure out what is going wrong:

    - Are you using NTLM or Kerberos authentication?

    - How are you accessing Central Admin (http://servername:someport)?


    Nico Martens - MCTS, MCITP
    SharePoint 2010 Infrastructure Consultant / Trainer
      

  • Friday, May 25, 2012 2:29 PM
     
     

    I'm using Kerberos and yes I'm accessing Central Admin site with standard http and assigned port.

  • Monday, May 28, 2012 1:20 AM
     
     

    I wasn't able to get this working with Kerberos. NTLM works out of the box.