MSProjectExpert : Implementing and Administering MS Office PS 2007 -User accounts

[Vit]

hi all,

I'm following the book to understand the best way to deply an EPM
enviroment...

when I have to create the user account to install the application, the
suggestion is to create 4 accounts:

- EMP2007Farm
- EMP2007Pool
- EMP2007SSP
- EMP2007WSS

it is clear the difference between EMP2007Pool anf EMP2007SSP... but I
have some dubts about EMP2007Farm and EMP2007SSP...

it there someone that can better explain the differents??? where and
when I have to use each???

thanks lots

Cheers

vit

 

[Gary L. Chefetz]

Vit:

You could easily have many more service accounts. All of these can be the
same account or you can use different accounts. It depends on your security
requirements.

--
----------
Gary L. Chefetz, MVP
MSProjectExperts
Project Server Consulting: http://www.msprojectexperts.com
Project Server Training: http://www.projectservertraining.com
Project Server FAQS: http://www.projectserverexperts.com
Project Server Help Blog: http://www.projectserverhelp.com

 

[Vit]

thanks... that's ok.... but I was trying to understand which can be
the better way...

sorry but I don't understand the difference between EPM2007Farm and
EPM2007WSS.... when I have to use them???

thanks

Vit

 

[Gary L. Chefetz]

Vit:

Maybe the following will help you:
http://www.projectserverexperts.com...int container hierarchy and nomenclature.aspx

A farm is a collection of servers. WSS is the base layer of SharePoint
functionality, Project Server is an application that runs in the SharePoint
envelope. For security purposes, Microsoft has provided for each service and
application within the SharePoint envelope to run under its own service
account. For tightest security requirements, you would assign each its own
account. For a simpler-to-manage environment, you can use only one account,
or a number of accounts as you desire. Beyond security, the advantage of
using separate accounts is that if something happens to one account, it
doesn't bring the whole system down. You need to decide what approach you
want to take.

--
----------
Gary L. Chefetz, MVP
MSProjectExperts
Project Server Consulting: http://www.msprojectexperts.com
Project Server Training: http://www.projectservertraining.com
Project Server FAQS: http://www.projectserverexperts.com
Project Server Help Blog: http://www.projectserverhelp.com


thanks... that's ok.... but I was trying to understand which can be
the better way...

sorry but I don't understand the difference between EPM2007Farm and
EPM2007WSS.... when I have to use them???

thanks

Vit

 

[Jason]

Sorry I am confused too,

So, I would have
• a Farm Admin account that is used for managing the different SQL
Servers in the Farm. So this account is basically the SA account in
each SQL Server in the Farm and will be used as the Database Access
Account when installing WSS?
• a WSS Service account that is used to install and manage WSS - this
would be the "System User" account in Sharepoint.
• a Service account for each WSS Application (eg: ProjectServer;
Intranet; etc). This is the SSP account for each WSS Application
• an IIS web application pool account for each WSS Application

so, to install WSS I have to be logged into the Windows Server machine
using the WSS Service Account?

I know that this is for larger scale deployments, but I am just
getting confused about the accounts that are necessary and what the
purpose each account is used for.

 

[Gary L. Chefetz]

Jason:

There are two good places to find this information: 1) TechNet: look at the
Project Server implementation documents. 2) We cover this extensively in our
book, Implementing and Administering Microsoft Office Project Server 2007,
Second edtion. It's a bit much to cover in news group posts.

--
----------
Gary L. Chefetz, MVP
MSProjectExperts
Project Server Consulting: http://www.msprojectexperts.com
Project Server Training: http://www.projectservertraining.com
Project Server FAQS: http://www.projectserverexperts.com
Project Server Help Blog: http://www.projectserverhelp.com


Sorry I am confused too,

So, I would have
• a Farm Admin account that is used for managing the different SQL
Servers in the Farm. So this account is basically the SA account in
each SQL Server in the Farm and will be used as the Database Access
Account when installing WSS?
• a WSS Service account that is used to install and manage WSS - this
would be the "System User" account in Sharepoint.
• a Service account for each WSS Application (eg: ProjectServer;
Intranet; etc). This is the SSP account for each WSS Application
• an IIS web application pool account for each WSS Application

so, to install WSS I have to be logged into the Windows Server machine
using the WSS Service Account?

I know that this is for larger scale deployments, but I am just
getting confused about the accounts that are necessary and what the
purpose each account is used for.

 

[Gary L. Chefetz]

Jason:

There are two good places to find this information: 1) TechNet: look at the
Project Server implementation documents. 2) We cover this extensively in our
book, Implementing and Administering Microsoft Office Project Server 2007,
Second edtion. It's a bit much to cover in news group posts.

--
----------
Gary L. Chefetz, MVP
MSProjectExperts
Project Server Consulting: http://www.msprojectexperts.com
Project Server Training: http://www.projectservertraining.com
Project Server FAQS: http://www.projectserverexperts.com
Project Server Help Blog: http://www.projectserverhelp.com


Sorry I am confused too,

So, I would have
• a Farm Admin account that is used for managing the different SQL
Servers in the Farm. So this account is basically the SA account in
each SQL Server in the Farm and will be used as the Database Access
Account when installing WSS?
• a WSS Service account that is used to install and manage WSS - this
would be the "System User" account in Sharepoint.
• a Service account for each WSS Application (eg: ProjectServer;
Intranet; etc). This is the SSP account for each WSS Application
• an IIS web application pool account for each WSS Application

so, to install WSS I have to be logged into the Windows Server machine
using the WSS Service Account?

I know that this is for larger scale deployments, but I am just
getting confused about the accounts that are necessary and what the
purpose each account is used for.

 

[Gary L. Chefetz]

Jason:

There are two good places to find this information: 1) TechNet: look at the
Project Server implementation documents. 2) We cover this extensively in our
book, Implementing and Administering Microsoft Office Project Server 2007,
Second edtion. It's a bit much to cover in news group posts.

--
----------
Gary L. Chefetz, MVP
MSProjectExperts
Project Server Consulting: http://www.msprojectexperts.com
Project Server Training: http://www.projectservertraining.com
Project Server FAQS: http://www.projectserverexperts.com
Project Server Help Blog: http://www.projectserverhelp.com


Sorry I am confused too,

So, I would have
• a Farm Admin account that is used for managing the different SQL
Servers in the Farm. So this account is basically the SA account in
each SQL Server in the Farm and will be used as the Database Access
Account when installing WSS?
• a WSS Service account that is used to install and manage WSS - this
would be the "System User" account in Sharepoint.
• a Service account for each WSS Application (eg: ProjectServer;
Intranet; etc). This is the SSP account for each WSS Application
• an IIS web application pool account for each WSS Application

so, to install WSS I have to be logged into the Windows Server machine
using the WSS Service Account?

I know that this is for larger scale deployments, but I am just
getting confused about the accounts that are necessary and what the
purpose each account is used for.