Installing SharePoint 2013 on Windows Server 2012 and SQL Server 2012 - Part 3: Administrative and Service Accounts


This guide shows you the administrative and service accounts required to install SharePoint 2013.

It includes the requirements, the configuration and the meaning of each account.

Basic Installation Accounts

You need to create at least the following domain accounts in Active Directory to successfully install SharePoint 2013:

Basic Installation Accounts
Required Account Example
SQL Server Service Account sqlSvcAcc
SharePoint Setup Administrator spAdmin
SharePoint Farm Account spFarmAcc

The meaning of the accounts is described later.

Difference to SharePoint 2007

Service accounts in SharePoint 2007 needed 2 properties when they were created in Active Directory:

  • User cannot change password and
  • Password never expires.

If you skipped SharePoint 2010 this isn’t necessary anymore since SharePoint 2010 because we now have managed accounts capable of password expiration and automatic change.

I always use in my development environment the options “User cannot change password” and “Password never expires”.

Assign permission

The SharePoint 2013 setup administrator is the only account where you need to assign permission manually.

SQL Server Service Account

  • Permission are assigned automatically during installation of SQL Server 2012.
  • The SQL Server service account should be a domain account and is used to run SQL Server.

SharePoint Setup Administrator

  • You need to manually assign permissions.
  • The setup administrator is used to install SharePoint 2013.
  • The SharePoint 2013 setup administrator has to be a member of the administrators group on every server SharePoint should be installed.
    Add the SharePoint administrator to the local administrators group.
  • This account also needs the securityadmin and dbcreator role in SQL Server.
    Assign securityadmin and dbcreator roles to the SharePoint setup administrator.
  • If I create a development environment I also assign the sysadmin role during the setup of SQL Server 2012 so I have only 1 account I need to administrate Windows Server, SQL Server and SharePoint. 
    Assign the sysadmin role if the SharePoint setup administrator should manage SQL Server.

Farm Account

Permissions are automatically assigned by the SharePoint 2013 setup administrator so you don’t have to do it.

The farm account is used for the following things [1]:

  • “Configure and manage the server farm.”
  • “Act as the application pool identity for the SharePoint Central Administration Web site.”
  • “Run the Microsoft SharePoint Foundation Workflow Timer Service.”

Next Step

Step 4: SQL Server 2012 Installation & Configuration


Here are the resources used in this article:

Other Resources