search

brianlala / AutoSPInstaller

Automated SharePoint 2010/2013/2016/2019/SE PowerShell-based installation script.
https://autospinstaller.com
MIT License
172 stars 81 forks source link

Correct the use of SPServices to run the C2WTS. #78

Open SPDEVGUY opened 3 years ago

SPDEVGUY commented 3 years ago

The SPServices account is not the right account to be running the claims to windows token service as. The C2WTS account requires very special elevated permissions and adding the Services account to local admins will result in warnings displayed in the health analyzer. Unfortunately I don't yet know how to automate configuring of local security policies as it is very low level from what I can google currently... however this is a much better step in the right direction of informing the user they need a specific account with very high risk permissions.

SPDEVGUY commented 3 years ago

Note - I didn't update the configuration file version but it will be needed. I assume this is usually part of your own process of merging and compiling updates.

SPDEVGUY commented 3 years ago

Also potentially included a fix for https://github.com/brianlala/AutoSPInstaller/issues/77 as it was caused by MatchComputerName