SAP BOBJ 4.3 Service account in local administrator group after installation

[serenagunter]

AFTER installation, does the BOADMIN service account need to stay in the Windows Server Local Administrators group?

I have asked SAP support this, but I don't know that they are understanding my questions.  They say the installation account can be removed after installation, but what about the service account?  In my case the accounts are one and the same... which might be confusing to some?  I'm just trying to get an answer so my network security staff can set up the proper permissions... they want to remove all local administrator accounts after installation is comeplete.

[ayman_salem · Accepted solution]

No, after installation it no longer needs to be in the Server Local Administrators group, but when upgrading you will need to do this again.

But You should also make sure that the service account on the computer running the SIA is granted the following rights:

• The account must specifically have the “Act as part of operating system” right.
• The account must specifically have the “Logon as a service” right.
• Full control rights to the folder where BI platform services is installed.
• Full control rights to “ HKEY_LOCAL_MACHINE\SOFTWARE\SAP BusinessObjects” in the system registry

...

hope it helps

[serenagunter · Accepted solution]

Hey, I finally got an answer from SAP Support that says differently. "As you questioned , " Does the service account need to stay as a local administrator after installation? " Ans. Yes , its need to be stay as local administrator , else SIA wont start or multiple services can have error. You can also refer the below article : 2339730 - Prerequisites for running the Server Intelligence Agent under the service account. - SAP for Me"

[ayman_salem · Accepted solution]

You now have the official answer from SAP