Solved

SBS 2011 System user rights

Posted on 2013-06-25
7
323 Views
Last Modified: 2013-06-30
Hi

New SBS2011 installed just under 1 month ago, migration from 2003 SBS.

I think I have screwed the rights on some of the system users (SPFARM, SPSEARCH, etc) when I tried to bring the users into the SBS console.  Not 100% but think I may have chosen to reset the rights rather than add new attributes.

Anyway, there are some strange network issues happening but my current issue is I cannot start services relying on SPFARM user due to "logon failure".

As it is about a month since they went in I am wondering if it is something to do with a password expiry and not letting me unlock because of complexity now required for this user.

I hope that makes sense.
0
Comment
Question by:George-
  • 4
  • 2
7 Comments
 
LVL 22

Expert Comment

by:Haresh Nikumbh
ID: 39274346
i am not sure if this will work or not but just give one try..

Start Registry Editor (Regedit.exe).Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows

Locate the ObjectName value in the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ServiceName

check if you those services having system account or user accounts..

if any one of service is created with user account then you need to change it back to system account

you can refer below link
http://support.microsoft.com/kb/259733
0
 
LVL 1

Author Comment

by:George-
ID: 39274359
Hi

These services do need the SPFARM user as it is set to that on another healthy server.
0
 
LVL 22

Accepted Solution

by:
David Atkin earned 250 total points
ID: 39274383
Hello,

The problem will probably be due to you adding the SPFARM account into the SBS Console as you suggested.

Have you tried to reset the password of the SharePoint Farm account and then re-entering it into the logon properties in the service?

Check the SharePoint Farm Account to make sure that it is a member of the following groups:

IID_IUSRS
Performance Log Users
Performance Monitor Users
WSS_ADMIN_WPG
WSS_RESTRICTED_WPG_V4
WSS_WPG

The SharePoint Search Service Account needs to be a member of the following groups:

WSS_WPG
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
LVL 1

Author Comment

by:George-
ID: 39274406
Can I just set the password to anything complex as long as I then match it in the service?
0
 
LVL 1

Assisted Solution

by:George-
George- earned 0 total points
ID: 39274447
I have started the services now by running

Repair-SPManagedAccountDeployment
 
from the sharepoint management shell.

as per:
http://blogs.technet.com/b/sbs/archive/2011/08/17/http-error-503-accessing-company-web-on-sbs-2011-standard.aspx

Thanks for your help all.
0
 
LVL 22

Expert Comment

by:David Atkin
ID: 39274449
Thank's for letting us know
0
 
LVL 1

Author Closing Comment

by:George-
ID: 39287884
My commands fixed it
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question