Navigate Up
Sign In

Creating Additional SharePoint 2010 Farm Administrators

Item is currently unrated. Press SHIFT+ENTER to rate this item.1 star selected. Press SHIFT+ENTER to submit. Press TAB to increase rating. Press SHIFT+ESCAPE to leave rating submit mode.2 stars selected. Press SHIFT+ENTER to submit. Press TAB to increase rating. Press SHIFT+TAB to decrease rating. Press SHIFT+ESCAPE to leave rating submit mode.3 stars selected. Press SHIFT+ENTER to submit. Press TAB to increase rating. Press SHIFT+TAB to decrease rating. Press SHIFT+ESCAPE to leave rating submit mode.4 stars selected. Press SHIFT+ENTER to submit. Press TAB to increase rating. Press SHIFT+TAB to decrease rating. Press SHIFT+ESCAPE to leave rating submit mode.5 stars selected. Press SHIFT+ENTER to submit. Press SHIFT+TAB to decrease rating. Press SHIFT+ESCAPE to leave rating submit mode.

 

Lately, I have noticed that people are struggling with user accounts that need to be a SharePoint 2010 Farm Administrator. When you install SharePoint 2010 the active account will become a Farm Administrator (since it’s a member of Local Administrators in order to install software on the server) as well as the account you have set up for the SharePoint configuration database access. But it is very reasonable that you want other accounts to manage the farm daily. Accounts that are traceable to a real world person. In this blog post I want to sum up the actions you will need to take in order to create an additional full-blown Farm Administrator.

First step is to log into Central Administration with your current Farm Administrator account. Then open the link Manage the farm administrators group.

2011-11-09-CreatingAddtlSP2010-01.png

Click the New button to add your user account.

2011-11-09-CreatingAddtlSP2010-02.png

Enter the user name or select the user account you want to promote to Farm Administrator. Click OK.

At this stage, the user account can manage the farm by using Central Administration.

Second step is to logon to the SharePoint server with the Farm Administrator account that you have used to install SharePoint or a Domain Administrator.

Then run the SharePoint 2010 Management Shell as Administrator. Now, you’ll need to give the user account PowerShell access to the SharePoint databases. So, when the account needs to manage solutions you will have to give PowerShell permissions to the SharePoint Configuration database.

Add-SPShellAdmin –username <youraccount>

Example:

2011-11-09-CreatingAddtlSP2010-03.png

This PowerShell cmdlet performs a couple of things. First, it adds the user account to the WSS_Admin_WPG group on ALL front-end webservers. This groups allows you to access SharePoint resources such as Logs and WebServices.

2011-11-09-CreatingAddtlSP2010-04.png

Then it also adds the user account to the SharePoint_Shell_Access role on the SharePoint database. If that database does not have this role yet, it will be created as well.

2011-11-09-CreatingAddtlSP2010-05.png

Back to the Add-SPShellAdmin cmdlet. If you do not specify a database, the SharePoint Configuration database is used.

If you have an existing content database in the farm, you will have to use this cmdlet for every content database you want to manage by PowerShell.

Add-SPShellAdmin –username <youraccount> –database <contentdb>

Example:

2011-11-09-CreatingAddtlSP2010-06.png

All necessary steps are taken and you can test your account to see if it can perform all farm administrative tasks, both in Central Administration as well as with PowerShell.

Summary

Creating additional SharePoint Farm Administrators is not that hard to do. After adding the user to the Farm Administrators group in Central Administration, you should also use the PowerShell cmdlet Add-SPShellAdmin to give the user PowerShell access to the Farm and content databases.

More information about the cmdlet Add-SPShellAdmin: http://technet.microsoft.com/en-us/library/ff607596.aspx

Categories: Security; Management; SharePoint; MOSS; WSS; 2007; 2010; PowerShell

Comments

Louis Vuitton iPhone 5 Case

Louis Vuitton iPhone 5 Case

I blog frequently and I really thank you for your content. This great article has truly peaked my interest. I'm going to bookmark your website and keep checking for new information about once a week. I opted in for your Feed too. I greatly appreciate all the info I've read here.[url=http://coolgalaxys4case.com/samsung-galaxy-case-chanel-galaxy-s3-case-c-35_36.html]Chanel Galaxy S3 Case[/url]

Posted 25-Jul-2013 by Louis Vuitton iPhone 5 Case
Android Application Development

Android Application Development

I have heard fine obsessions about this topic. Is there a way I can move all my word press content into it? Any kind of assist would be very much respected!

Posted 04-Dec-2013 by Android Application Development
alksdsajdksfs

alksdsajdksfs

Including in the murky water Replica Watches. A real asset when we know that a good read data can save the life of hublot Replica a diver! As for the other necessary for scuba diving watch, because it means that Panerai Replica the watch is running it is equipped with a counterweight in the shape of a triangle orange (a brand) as well. The final date is traditionally in 3 hours.

Posted 17-Apr-2014 by alksdsajdksfs

Notify me of comments to this article

E-mail:
   

Add Comment

Title:

 
Comment:
Email:

   


Name:

 
Url: