Shared Service Provider Application Pool Account
By peter.stilgoe
Current implementation is Windows 2008 server, IIS 7.0 & MOSS 2007, when defining the Shared Service Provider Application Pool Account it is stated that you dont need to grant it any permissions as they will get added automatically upon creation eg:
When each application pool is setup, you must specify an account that will be used for that specific application pool’s identity. This account will be used to access the content databases associated with the web application. It is recommended that a new service account is created for each application pool. This should be a Domain Account with no specific permissions. When the account is specified & SharePoint creates the application pool, it automatically grants the account additional needed permissions.
However in my environment this is not the case as upon creation of this SSP no accounts appear to be able to access the SSP config page. In the short term I have set the App pool account for the SSP as SPadmin (my install / admin account) until I have time to figure out exactly what is causing this & what permissions are required.
More From pstilgoe



August 13th, 2008
