# Accounts used by application pools or service identities are in the local machine Administrators group SharePoint

- Link: https://sharepointtechnicalsupport.com/2015/05/05/accounts-application-pools-local-administrators-sharepoint/
- Published: 2015-05-05T07:32:13+05:30
- Author: Deviprasad Panda

**Rule Name:**  Accounts used by application pools or service identities are 
in the local machine Administrators group.

**Summary:**  A user account that is used by application pools or services must 
have permissions of a domain user account and must not be a member of the Farm Administrators
group or a member of the Administrators group on the local computer. Using highly
privileged accounts for application pools or services poses a security risk to the
farm, and could allow malicious code to execute.

**Cause:**  Accounts that are used by application pools or services are members 
of the Administrators group on the local computer.

** Resolution: Change the user account to a predefined account, or to a domain user
account that is not a member of the Administrators group. **

 1. Verify that the user account that is performing this procedure is a member of the
    Farm Administrators group.
 2. On the Central Administration home page, in the **Security** section, click **Configure
    service accounts**.
 3. On the Service Accounts page, in the **Select the component to update** list, click
    the application pool or service that uses the credentials of a member of the Administrators
    group on the local computer as its security account.
 4. In the **Select an account** list, click an appropriate account for this component—
    for example, the predefined account **Network Service** — or click **Register new
    managed account**, and then on the Register Managed Account page, specify the credentials
    and the password change settings that you want.
 5. Click **OK**.

### Share this:

 * [  X ](https://sharepointtechnicalsupport.com/2015/05/05/accounts-application-pools-local-administrators-sharepoint/?share=twitter)
 * [  Facebook ](https://sharepointtechnicalsupport.com/2015/05/05/accounts-application-pools-local-administrators-sharepoint/?share=facebook)
 * [  WhatsApp ](https://sharepointtechnicalsupport.com/2015/05/05/accounts-application-pools-local-administrators-sharepoint/?share=jetpack-whatsapp)
 * [  Email ](https://sharepointtechnicalsupport.com/2015/05/05/accounts-application-pools-local-administrators-sharepoint/?subject=%5BShared%20Post%5D%20Accounts%20used%20by%20application%20pools%20or%20service%20identities%20are%20in%20the%20local%20machine%20Administrators%20group%20SharePoint&body=https%3A%2F%2Fsharepointtechnicalsupport.com%2F2015%2F05%2F05%2Faccounts-application-pools-local-administrators-sharepoint%2F&share=email)
 * [  Telegram ](https://sharepointtechnicalsupport.com/2015/05/05/accounts-application-pools-local-administrators-sharepoint/?share=telegram)
 * [  LinkedIn ](https://sharepointtechnicalsupport.com/2015/05/05/accounts-application-pools-local-administrators-sharepoint/?share=linkedin)
 * [  Tumblr ](https://sharepointtechnicalsupport.com/2015/05/05/accounts-application-pools-local-administrators-sharepoint/?share=tumblr)
 * [  Pinterest ](https://sharepointtechnicalsupport.com/2015/05/05/accounts-application-pools-local-administrators-sharepoint/?share=pinterest)

### Like this:

Like Loading…

### _Related_