What accounts to run: OSearch15 & SPSearchHostController ?

Hi,
I have installed SharePoint Server 2013, and I got the Search service working correctly.
I am using 3 Accounts for the Search: (Content Access Account, Admin Account, and Query Account).
The SharePoint Health Analyzer is now showing a critical error: Farm Account (Domain\FarmAccount) is highly privileged and should not be used for any other services on any machines in the server farm. The following services were found to use this account: 
OSearch15 (Windows Service)
SPSearchHostController (Windows Service)
Could you please guide me on what shall I do?
What kind of service/managed accounts are recommended to run: OSearch15(Windows Service) and SPSearchHostController(Windows Service) ?
PS: Will changing the accounts cause these services to crash/stop working because of less permissions? What do you think I should do?

You can create new account by taking below permission in consideration
http://technet.microsoft.com/en-us/library/cc263445%28v=office.15%29.aspx
SharePoint Server Search Service
By default, this account runs as the Local System account.
If you want to crawl remote content by changing the default content access account or by using crawl rules, change this to a domain user account. If you do not change this account to a domain user account, you cannot change the default content access account
to a domain user account or add crawl rules to crawl this content. This restriction is designed to prevent elevation of privilege for any other process running as the Local System account.
Default Content Access
No manual configuration is necessary if this account is only crawling local farm content. If you want to crawl remote content by using crawl rules, change this to a domain user account, and apply the requirements listed for a server farm.
If this helped you resolve your issue, please mark it Answered

Similar Messages

  • SPUserCodeV4(Windows Service) what account to run this service

    Hi I'm getting the feared:
    The server farm account should not be used for other services.
    Service:
    SPUserCodeV4(Windows Service)
    Any recommendations on what account type i can use for this service? Just a normal domain user?
    My windows service (SharePoint User Code Host) is actually disabled. Not needed here.
    br
    Bjorn

    It is best practice to use unique service accounts for each service app.  Service accounts are just domain user accounts that are registered in SharePoint as service accounts in order to manage their password changes.
    Start here: 
    http://www.toddklindt.com/blog/Lists/Posts/Post.aspx?ID=237
    I trust that answers your question...
    Thanks
    C
    http://www.cjvandyk.com/blog |
    LinkedIn | Facebook |
    Twitter | Quix Utilities for SharePoint |
    SharePoint Admin Nav Console (SPANC)

  • Which account is running what service, app pool etc.

    HI all,
    Does anyone know if there is a quick and easy way to establish which domain account is running what service/app pool etc. within the farm?
    Thanks in advance.

    Hi Geoff,
    The Configure Service Accounts page gets its information from different sources I believe:
    - Farm Account
    - Windows Services related to SharePoint
    - Web Application Pools (Accounts running your Web Applications)
    - Service Application Pools (Accounts that are running your Service Applications)
    In order to retrieve this information, you would have to create a script that would do the same.
    I don't have a script for that. Maybe someone else already has this script.
    Nico Martens - MCTS, MCITP
    SharePoint Infrastructure Consultant / Trainer

  • How to know what reports are running by looking at SSReproting Services to see what reports are running and also any clue of which application is using the reporting services?

    How to know what reports are running by looking at SSReproting Services to see what reports are running and also any clue of which application is using the reporting services?

    To see what reports are running, take a look at the execution log views that are available in the database.  Which views that are available are dependent on your version of SSRS.
    http://technet.microsoft.com/en-us/library/ms159110.aspx
    To see which application is using SSRS is a little more difficult.  You can turn HTTP logging on, which will give you an idea of where connections are coming from, so you can see IP addresses.  You can also look at the execution log view to see
    user accounts.  So, depending on your environment and use of service accounts, this could be easy, or difficult.
    http://technet.microsoft.com/en-us/library/bb630443.aspx
    If all else fails you can look for clues in the SSRS logs.  Good luck...

  • What accounts are used for video iChat between two Macs?

    I need to set up video iChat between a 10.6.8 Snow Leopard laptop and a 10.5.8 iMac.  The machines are not on the same network.  I have read all the posts and the help for iChat but the explanations of accounts are confusing.  What accounts can be used for Mac-to-Mac video chat and how do we set them up?

    Hi,
    AIM or Jabber.
    AIM valid accounts include any @mac.com ID (Lapsed, paid for (originally) or a Trial account) Any @me.com account that was linked to iCloud at the change to iCloud from MobileMe. And of course any @icloud.com ID.
    If you have an Apple ID that started as one of these and "Migrated" to the other services other the years and is linked for Email they will work as separate IDs/Valid Screen Names with the AIM servers.
    Effectively this then works Mac to Mac in Messages or iChat.
    Jabber IDs.
    Many servers http://www.jabberes.org/servers/ (this is only some and the site also list many that are Off line)
    Also Google run what was called the GoogleTalk server which means Google Mail IDs can be used as Jabber IDs
    Facebook run a separate Chat ID/Server which you have to sign up for at Facebook.
    AS most server are what is called "Federated" you can add Jabber Buddies form one server to a Buddy List of another.
    Therefore you may have a Google Buddy list as such but you can add Facebook Buddies  or other Buddies on other Jabber servers.
    Audio and Video Chat are Mac to Mac.  You cannot Video or Audio chat to Web Browser login even if the Browser has the video plugin for that service  (Basically web browser to web browser chat require the Video plugin for that service/server).
    FaceTime will not work.
    You can download FaceTime for the Snow Leopard Computer as it is an Intel only app.
    However it cannot be downloaded for the Leopard computer.
    Summary.
    You may have IDs that will work in iChat 4 and 5 already (Apple IDs as AIM Names or Googlemail or Facebook IDs)
    Chats are then Mac to Mac (and also AIM to AIM or Jabber to Jabber but not AIM to Jabber).
    iChat will allow you also to do Screen Sharing as well as Audio Only chats
    10:05 pm      Saturday; August 9, 2014
    ​  iMac 2.5Ghz i5 2011 (Mavericks 10.9)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
     Couple of iPhones and an iPad

  • How do I find out what applications are running in the background

    I have a 2008 iMac with 2GB memory.  How do I find out what programs are running in the background?  I am going to buy a new iMac before the end of the year to replace this one.  When I looked at Activity Monitor it shows 1.8Gb used but doesn't tell all the programs running.

    open activity monitor [if it doesnt launch click winders>Activity Monitor]. then it'll show all proceses

  • HT2486 how do I know what account a contact is in (Icloud, on my mac, etc) if it is already in my address book. also how can I change an existing contact to my iCloud account?

    I have upgraded to Lion so that I can use iCloud.
    when I select a contact in the address book, I can't tell what account it is in,
    and I can't change the contact to iCloud if it's not already in that account, so the
    contact comes up on my other devices.
    This seems like a very basic function,yet if I want a contact to be on iCloud, it
    seems I have to create a new contact with iCloud selected in the preferences.
    is there another way?

    Happy to help.
    Some good news:
    Address Book will become Contacts in Mountain Lion and the addition of the Group column to the display will make working with differnt accounts a bit more obvioius and easier.
    http://www.apple.com/osx/whats-new/features.html#contacts
    http://www.apple.com/osx/apps/#contacts
    Matt

  • Where in gods name is the homesharing button, I see a little cloud that you cannot click on and tells you what account you have but thats is. There's an option for turning on and off homesharing, but no button to access the actual library of the other PC

    Where in god’s name is the homesharing button, I see a little cloud that you cannot click on and tells you what account you have but that's it. There's an option for turning on and off homesharing, but no button to access the actual library of the other PC. On either PCs. Both are logged in and both are registered for homesharing. however because apple keeps updating and moving things around for no reason there appears to be no way of accessing the homsharing button in the latest version of itunes. the website refers to " Once set up, all the libraries from your computers you've enabled Home Sharing on will show up in the SHARED area of iTunes:" well I have searched all over in the recent itunes versions and there is no "shared area" to be found.
    Please find the attachment of a screen cap of my itunes.
    If anyone can help by telling me where it has been moved to or if it even still exists that would be much appreciated.

    Welcome to the Apple Community.

  • I have multiple email accounts in my iPhone. Before the 6.0 update... I could select what account to send from. Now it's a default. Do I have to go change the email default everytime I want to send an email from a different account?

    I have multiple email accounts in my iPhone 4. Before the 6.0 update... I could select what account to send from each time. Now it's a default. Do I have to go change the email default setting everytime I want to send an email from a different account?

    In Mail Preferences/Accounts/each GMail account, set up the SMTP Outgoing Server for each account separately, going into SMTP name/edit/Advanced and specify the Username of each account.  The Outgoing servers must be two different servers, authenticated by the Username and Password of each.
    Otherwise, the GMail SMTP server will change the from address to that of the account where the SMTP server was setup.
    Ernie

  • How I can see what accounts I created with my family pack in my old mobileme account?

    Any ideas how I can see what accounts I created with my family pack in my old mobileme account?
    i updated it when we need to migrate and all emails are active and being used.
    i need to update an email address. we use this for my personal company and need to keep the email in
    the same format so it matches the others in the company. i dont see it anywhere in my account now.
    i am using a .mac format. thanks.

    In order to see which devices are authorized on your account:
    Open iTunes
    Click Store
    Click Account
    Click View Account
    Enter your password
    Look in the second section iTunes in the Cloud
    To the far right you'll see Manage Devices
    Once it's clicked you will see all of the devices currently authorized in iTunes/on your account
    I was going to say, "Hope this helps," but based on the above, I'm pretty sure it did!
    Thanks guys...

  • Address Book, how do I see what account the contact is from?

    In OS X Lion, Address Book, I have many names listed 2,3,4 times. Would like to know what account they belong to (Exchange, On my Mac, Mobile Me etc.) so that I can delete the extra ones.
    In address book, can I select the contact and see what account the contact belongs to?
    Hope so.
    Thx Much

    Thx Matt,
    Not sure you know what I want to do. I have numerous contacts in my address book, some are from my exchange account, some stored on my Mac and some from Mobile Me.
    If I see the same name three times is there a way I kno what account each of the duplicate name belongs to.
    Hope I said this right.
    Thx Much
    ..holding down the "option" key when I click on to a contact does not seem to do anything.

  • What report is run in SAP to get the DATE on which Users are locked ?

    Hello,
    What report is run in SAP to get the DATE on which Users are locked ?
    I have tried with RSUSR200 ,-- last logon ,last password change , but i did not get a option to find the date on which are Users are locked .
    Can anyone suggest what report should be executed to get the date on which Users are locked and by whom ?
    As a alternate , i  am usig SUIM to get extract this data but i am looking for a report .
    thanks & regards
    Ganesh

    Hi Ganesh,
    You can try the below link where many of the options are described:
    How i can check at what date perticular user was locked and who lock it?
    Regards,
    Nilanjan

  • How do i see what applications are running in the background

    My iMac is running very slow my operating system is OS X Yosemite Version 10.10.2 with a 2.5 GHz Intel Core i5 Processor. How do I see what applications are running in the background?

    Reinstalling OS X Without Erasing the Drive
    Boot to the Recovery HD: Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
    Reinstalling OS X Without Erasing the Drive
    Repair the Hard Drive and Permissions: Upon startup select Disk Utility from the main menu. Repair the Hard Drive and Permissions as follows.
    When the recovery menu appears select Disk Utility and press the Continue button. After Disk Utility loads select the Macintosh HD entry from the the left side list.  Click on the First Aid tab, then click on the Repair Disk button. If Disk Utility reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit Disk Utility and return to the main menu.
    Reinstall OS X: Select Reinstall OS X and click on the Continue button.
    Note: You will need an active Internet connection. I suggest using Ethernet if possible because it is three times faster than wireless.
    Alternatively, see:
    Reinstall OS X Without Erasing the Drive
    Choose the version you have installed now:
    OS X Yosemite- Reinstall OS X
    OS X Mavericks- Reinstall OS X
    OS X Mountain Lion- Reinstall OS X
    OS X Lion- Reinstall Mac OS X
         Note: You will need an active Internet connection. I suggest using Ethernet
                     if possible because it is three times faster than wireless.

  • Colorblind users can't tell what apps are running

    There needs to be a setting under Dock Preferences to CHANGE THE COLOR of the dot under running applications in the Dock.
    I know the dot is there because I asked where the arrows went in the Apple Store and they told me it was there. After straining and squinting, I can almost see it. This is NOT ACCEPTABLE.
    With my color blind situation, I can no longer tell what apps are running or not. I have to press command-option-escape for force quit just to see what is running.
    Either bring back the Tiger black arrow, or allow a preference so that color blind users can tell what is going on.

    You bring up an excellent point but no one at Apple who can make the change is likely reading Discussions. Put in a request for the Dock improvement at Apple OS X Feedback where it will be put in Apple's system for user requests.
    http://www.apple.com/macosx/feedback/

  • Managed Service Accounts to run SQL Server Service

    Has anyone played around with using managed service accounts for running the SQL Server Service? I am on a forest functional level of 2008R2 and was thinking about how cool it would be to use those for SQL Server. Unfortunately, I hear that it's not supported
    by Microsoft and yet I've read about people doing that but would like to know if anyone has first hand experience. Otherwise, if not recommended, I'll stick to the old fashioned way of creating typical user accounts. Thanks in advance!

    Hi Scott hi Sean
    I see that my first answer was badly phrased.
    Let me try to make it more clear:
    Managed Service Accounts(MSA):
    Works with Kerberos including Delegation, but:
    NOT working with cluster nodes
    NOT working for load balancing using Kerberos
    More information:
    http://blogs.technet.com/b/askds/archive/2009/09/10/managed-service-accounts-understanding-implementing-best-practices-and-troubleshooting.aspx
    Group Managed Service Accounts (GMSA):
    Works with Kerberos including Delegation, but:
    NOT supported with Failover Clustered Instances
    Here is the connect item:
    http://connect.microsoft.com/SQLServer/feedback/details/767211/gmsa-for-sql-server-failover-clusters
    @all Please feel free to vote(!). I am waiting for this as well.
    This is the state of my information today. Feel free to correct me if you know of any changes.
    Andreas Wolter (Blog |
    Twitter)
    MCM - Microsoft Certified Master SQL Server 2008
    MCSM - Microsoft Certified Solutions Master Data Platform, SQL Server 2012
    www.andreas-wolter.com |
    www.SarpedonQualityLab.com

Maybe you are looking for