sharepoint 的application pool的user不应该是server的管理员

最新推荐文章于 2025-08-05 09:32:34 发布

原创最新推荐文章于 2025-08-05 09:32:34 发布 · 480 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#sharepoint #application #user #server #permissions #security

sharepoint 专栏收录该内容

6 篇文章

订阅专栏

本文讨论了在 SharePoint 2010 中使用高权限帐户作为应用池和服务帐户所带来的安全风险，并强调了 Farm Administrator 帐户不应被用于其他服务中。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

A user account that is used by application pools or services must have permissions of a domain user account and must not be a member of the Farm Administrators group or a member of the Administrators group on the local computer. Using highly privileged accounts for application pools or services poses a security risk to the farm, and could allow malicious code to execute.

The Farm Account, which is used for the SharePoint 2010 Timer service and the Central Administration site, is highly privileged and should not be used for other services on any computers in the server farm. Services in the farm were found to use this account.