Saturday, November 30, 2013

Health Analyzer: The server farm account should not be used for other services

Problem

You connect to Central Administration and observe a critical issue:
You click the link, View these issues, displayed in the message bar, and you see the error, The server farm account should not be used for other services, appear in the SharePoint 2010 Health Analyzer Review problems and solutions report:
Solution
  1. Click the error link to view its description dialog:
  2. The error description dialog identifies the cause of the problem: the Web Analytics Data Processing Service is being run by the farm account.
  3. Close the dialog.
  4. In Central Administration, go: Security > General Security > Configure service accounts.  The Service Accounts page appears.
  5. From the dropdown, select Windows Service - Web Analytics Data Processing Service.
    .
  6. From the Select an account for this component dropdown, select a managed account other than the farm account.  For this posting, the sp_app account was selected:
  7. Navigate back to the Review problems and solutions page, and then click the error link, The server farm accounts should not be used for other services.
  8. On the error description dialog, look for the button Reanalyze Now:
    This launches the Health Analyzer
  9. Click this button.  After you click this button, it will become disabled.
  10. Click Close.  The error description dialog closes. Wait a minute or two for the Health Analyzer job to complete.
  11. Refresh the page: the error no longer appears:
Summary

This posting presented steps for resolving the health analyzer rule, The server farm account should not be used for other services. For additional details on this topic, consult the references below.

References
Notes
  • By default, the rule governing the Health Analyzer checking this condition runs weekly.  You can verify this yourself by going: Monitoring > Health Analyzer > Review rule definitions. Look in the Category: Security group.

No comments: