Monthly Archives: July 2013

The Server farm account should not be used for other services

Health Analyzer Error Details:
Error Details:

1 2

CONTOSO\Administrator, the account used for the SharePoint timer service and the central administration site, is highly privileged and should not be used for any other services on any machines in the server farm. The following services were found to use this account: Microsoft Project Server Events Service executes events triggered by changes to entities on the ProjectServer (Windows Service)
SharePoint – 40492 (Application Pool)
Microsoft Project Server Queuing Service executes project related jobs asynchronously. Example queue jobs: Save project, publish project, submit timesheet.(Windows Service)
SPSearch4(Windows Service)
Web Analytics Data Processing Service(Windows Service)

Cause: The Farm Account, which is used for the SharePoint 2010 Timer service and the Central Administration site, is highly privileged and should not be used for other services on any computers in the server farm.

Resolution Steps:  You need to Change the Server farm account used for other services to low privileged account. This error may vary as per the services running in your environment.

User Account Requirement – This can be any domain user account but must not be a part of local administrator group. You need to plan for administrative and service accounts based on your environment. Click here for further details.

Note: Verify that the user account that is performing this procedure is a member of the Farm Administrators SharePoint group.

In this example, we have created one domainUser Account with the name of “EPMSvcAccount” which is not a part of local administrative group.Follow below steps to fix above error –

1.       Register the “EPMSvcAccount” on the SharePoint Server 2010 farm as per below snapshot:

 

3

2. On the Central Administration home page, click Security, and then in the General Security section, click Configure service accounts.

3. On the Service Accounts page, in the Credential Management section, in the upper drop-down list, click the service for which you want to update credentials.

 

4

4. Run the IISRESET /NOFORCE on APP and WFE server.

 

5

5. Check in the Health analyser you will notice the issue is fixed now.

6

Query to find Projects with summary level Resource assignment

Environment: Project Server 2010

Requirement: Recently, we have got a requirement as part of EPM system health check data diagnostic for one of our client. For which, I have made a below small SQL query to detect the projects those are having the summary resource assignments. Hope this helps you.

–Query to display the Project Names having Summary Level resource Assignment

Select distinct P.ProjectName, COUNT(a.AssignmentUID)

FROM

MSP_EpmProject p INNER JOIN MSP_EpmTask t

ON p.ProjectUID=t.projectuid

INNER JOIN MSP_EpmAssignment A on t.taskUID=A.TaskUID

WHERE  t.TaskIsSummary=1

GROUP By P.ProjectName, t.taskuid

Query to Create the new table schema using the existing table

Select *

INTO   New_TableName

From   Source_TableName

Where 1 = 2