Proper planning is crucial to the successful implementation of any MOSS 2007 Farm. Below is guide to preparing your server environment by creating the proper accounts and simplifying permissions by making of use of Active Directory groups.
Step 1 – Create Accounts and Admin Group in Active Directory
The following user accounts should be created:
SAMPLE USER ACCOUNTS:
Server Farm Account = DomainSP-ServerFarm
Setup User Account = DomainSP-SetupUser
SQL Service Account = DomainSP-SQLService
SAMPLE DOMAIN GLOBAL GROUP:
AD Global Group = DomainSharePointAccounts
Step 2 – Add Accounts to Administrative Group
Add the three setup accounts created in Step 1 to the Active Directory Global Group created in Step 2.
Step 3 – Add Domain Group to Local Administrators Group on SharePoint Servers
Add the Active Directory Global Group (DomainSharePointAccounts) to the Local Administrators Group of every Web Front End or Application Server within your SharePoint Farm.
Note: You may also use Active Directory Group Policies to accomplish this.
Step 4 – Add Account to the SQL Server Local Admin Group
Add the SQL Service Account (DomainSP-SQLService) to the Local Administrator Group of your SQL Server.
Step 5 – Assign SQL Server Roles
Create the following Logins and assign the defined Roles on the SQL Instance to be used for the installation of MOSS 2007:
Logins Roles
DomainSP-ServerFarm dbcreator, securityadmin
DomainSP-SetupUser dbcreator, securityadmin
DomainSP-SQLService dbcreator, securityadmin, sysadmin
gregrod