While working on a Powershell script to add web frontends to an existing SharePoint 2007 farm I decided to see what it would take to have a dedicated server for crawling (indexing). I went ahead and made the change through Central Admin first (to make sure it worked) and then just happened to check the event logs and found a LOT of errors - a new one every two minutes. Whenever I see the same error every two minutes I immediately think "TIMER JOB"! Well, it seems that as soon as I selected a dedicated frontend for crawling the HOSTS file disappeared!?!?!? How odd!
So, of course, the first thing we all do - GOOGLE IT!
The original post that addresses this problem can be found here.
Bottom line: the wss_admin_wpg local group (which contains the timer job service account) needs write/modify permissions to the ../drivers/etc directory. The reason this error doesn't usually come up is most people use the MOSS Admin account for all the services and it usually has local administrator rights to start with. But if we follow "Least Privilege" rules and use a separate account for this AND specify a dedicated frontend - then the problem will surface.
Now to figure out how to use stsadm.exe to specify a dedicated web frontend. :D
Blogs of Interest
Blog Archive
2 comments:
Use the MOSS Admin account for all services...who would do that??!! =)
I'm trying to figure out who doesn't! (besides us anyway ;o))
Post a Comment