Quantcast
Channel: Forum Microsoft Identity Manager
Viewing all articles
Browse latest Browse all 6944

Why does the BHOLD Core installer need Domain Admin privs?

$
0
0

All,

I was installing BHOLD this weekend in my lab, and I was a bit surprised that the BHOLD Core module needs to be installed by a Domain Admin level account.  

If we pre-create the Service account with the proper SPN, and the needed groups, as well as set that account to logon as a service on the target server, what else is going on that would require Domain Admin during setup?  

On my first read through, I thought the BHOLD account itself needed Domain Admin to function, which seemed quite wide a role, but on re-reading it's only the account for which you are installing with.  

I'm following the directions as per the technet link here:  http://technet.microsoft.com/en-us/library/jj134095(v=ws.10)

I wanted to make sure that the BHOLD account itself had no reliance on being Domain Admin to function, especially if it's being used as the AppPool Identity.

Thanks,

Jef


----- http://jeftek.com


Viewing all articles
Browse latest Browse all 6944

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>