PS 2007 Installation Question

[Russ]

Hi there,

I am doing a fresh install of Project Server 2007 and have a few questions
concerning how to setup administrative accounts.

There are a few contradictions in the Deployment guide concerning security
accounts. In the 'Project Server 2007 installation procedures' section of
the online deployment guide, it states that you should use the farm
administrator account as the application pool identity for the web
application which is running Project Server; however, if I go to the 'plan
for administrative and service accounts' section, it is recommended that you
'Plan a unique domain account for each application pool. We recommend that
you select a unique user account that does not have administrative rights on
any server or resource in the server farm.' The downloadable version of the
deployment guide does not explicitly recommend using the farm administrator
as the application pool identity.

Also, are there any special requirements for the Project Server
administrator account (the one that you use when provisioning a new Project
Web Access site)? Both the downloadable and online versions of the
deployment guide state that I should refer to the 'plan for administrative
and service accounts' section of the document; but there is no mention of
any Project Server Administrator account in that section.

If you have any insight on this matter, or if you can share what has worked
for you, I would greatly appreciate it.

Thx

 

[Paul Conroy]

Unless you have a requirement to separate out the admin accounts (ie
different teams within IS Dept perform different admin functions on the farm,
customer application/data separacy, Internet facing etc), I'd recommend
sticking to one domain account for all Project Server admin functions -
except SQL which should run under a unique account. This simplifies the
architecture and operation functions such as changing the admin account
password.

I agree that the online documentation is misleading, but both
recommendations are valid under different circumstances. For a single server
install you'd typically use the farm admin account for the SSP. For a
hosting solution each PWA SSP would run under a unique account.

Again, keep it simple, unless you have a directive to do otherwise.

HTH

Paul