Domain Admin accout for ACS

Unanswered Question
May 9th, 2008
User Badges:

Hi, Everybody. Recently I am installing ACS for one of my customer who can not give me the domain administrator account to run ACS service. Anyone knows that is there any workaround for this? Thanks.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
andypalfrey Wed, 07/09/2008 - 08:24
User Badges:

The doc says that BUT We have it happily running with the ACS service account as a member of "domain users" only, membership of the local admins group on the ACS server(s) and additional user rights granted via GPO - "log on as a service", "log on as a batch job", "act as part of the operating system" - It all depends on the DACLs set on AD - the ACS account needs to be able to bind to AD and read attributes.




This Discussion