{"id":1205,"date":"2012-03-07T00:58:11","date_gmt":"2012-03-07T05:58:11","guid":{"rendered":"http:\/\/blogs.devhorizon.com\/reza\/?p=1205"},"modified":"2012-03-25T14:17:03","modified_gmt":"2012-03-25T19:17:03","slug":"adding-additional-farm-admins-to-an-existing-farm","status":"publish","type":"post","link":"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/","title":{"rendered":"Adding Additional Farm Admins to an Existing Farm"},"content":{"rendered":"<p><strong>Scenario<\/strong>: You have installed a SharePoint farm and life is great in your company with you being the only person who looks after that farm! Your employer is kind enough to hire a new resource to help you out. You have been asked to make the new hire a farm admin too.<\/p>\n<p><strong>Problem<\/strong>: Adding additional farm administrators is not a straight forward process as the SharePoint central administration site\u00a0makes it look like! Just by adding the new user to the the farm administrators group in central administration, it means pretty much nothing!\u00a0Unless you remember to update different security groups here and there, you could be left wasting hours on troubleshooting. To hopefully save you some time and headaches, here is a process to give a user\u00a0farm admin privileges.<\/p>\n<p><strong>Solution<\/strong>:<\/p>\n<p>1. To start off, create an AD Group for SharePoint administrators. We&#8217;ll use &#8220;SharePoint Server Admins&#8221; as the name.<br \/>\n2. Add the &#8220;SharePoint Server Admins&#8221; AD Group to the BuiltIn\\administrators group on each server in the farm.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2012\/03\/030712_0557_AddingAddit1.png\" alt=\"\" \/><\/p>\n<p>Note: the (BUILTIN\\Administrators) group is already referenced in both the Farm Administrators group in Central Administration and the local WSS_Admin_WPG group as shown in the following two figures:<\/p>\n<p>Central Administration Site &gt; Security &gt; Manage the farm administrators group<br \/>\n<img decoding=\"async\" src=\"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2012\/03\/030712_0557_AddingAddit2.png\" alt=\"\" \/><\/p>\n<p>WSS_Admin_WPG group<br \/>\n<img decoding=\"async\" src=\"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2012\/03\/030712_0557_AddingAddit3.png\" alt=\"\" \/><\/p>\n<p>3. Open SQL Management Studio and add the &#8220;SharePoint Server Admins&#8221; group as a server login with dbcreator, public, and sysadmin server roles as documented <a href=\"http:\/\/technet.microsoft.com\/en-us\/library\/cc263445.aspx\">here<\/a>.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2012\/03\/030712_0557_AddingAddit4.png\" alt=\"\" \/><\/p>\n<p>4. In the properties of the new SQL login created, go to he User Mappings section. In the mapped databases select the central administration and config databases and ensure that <strong>public<\/strong> and <strong>db_owner<\/strong> role memberships are checked. For the config database you will also want to select the <strong>SharePoint_Shell_Access<\/strong> role membership to give farm administrators the access to execute PowerShell against the farm.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2012\/03\/030712_0557_AddingAddit5.png\" alt=\"\" \/><\/p>\n<p>5. Add the new farm admins to the &#8220;SharePoint Server Admins&#8221; AD Group.<\/p>\n<p>6. Additionally, if you want to give administrator access to the site collections created, add the &#8220;SharePoint Server Admins&#8221; group to the Site collection administrators of each site collection. Note that to add a domain security group in the site collection administration group in SharePoint Foundation 2010 you need to apply <a href=\"http:\/\/support.microsoft.com\/kb\/2597136\">KB 2597136 <\/a>which was just released today.<\/p>\n<p><a href=\"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2012\/03\/07-03-2012-10-58-28-PM1.png\"><img loading=\"lazy\" decoding=\"async\" title=\"07-03-2012 10-58-28 PM\" src=\"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2012\/03\/07-03-2012-10-58-28-PM1.png\" alt=\"\" width=\"704\" height=\"235\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #ff0000;\">[Update 03\/16\/2012] As per Marco&#8217;s comment below, you can also add a user policy (Full Control) for each Web application if you want your SharePoint Server Admins group\u00a0to access all site collections with the same set of permissions. See the instructions <a href=\"http:\/\/technet.microsoft.com\/en-us\/library\/ff608071.aspx#section1\">here<\/a>.<\/span><\/p>\n<p>Now we have successfully added a new AD Group to the SharePoint Farm Administrators, which this will allow us to add new users through one centralized location (AD). This makes adding users simpler by not having to add users individually to each of the places described above. Nice, easy, and centrally managed. Enjoy!<\/p>\n<p>P.S. Below you will find some other related issues and workarounds:<\/p>\n<address><a href=\"http:\/\/sensoft2000-sharepoint.blogspot.com\/2010\/06\/new-ribbon-icon-disabled-in-central.html\">http:\/\/sensoft2000-sharepoint.blogspot.com\/2010\/06\/new-ribbon-icon-disabled-in-central.html<br \/>\n<\/a><\/address>\n<address><a href=\"http:\/\/spdeveloper.net\/2010\/06\/you-cant-create-web-applications-in-central-admin-even-if-youre-farm-admin\/\">http:\/\/spdeveloper.net\/2010\/06\/you-cant-create-web-applications-in-central-admin-even-if-youre-farm-admin\/<br \/>\n<\/a><\/address>\n<address><a href=\"http:\/\/social.msdn.microsoft.com\/Forums\/en-US\/sharepoint2010general\/thread\/e1f3deee-75c1-402a-8e9f-6c5ff15796b7\/\">http:\/\/social.msdn.microsoft.com\/Forums\/en-US\/sharepoint2010general\/thread\/e1f3deee-75c1-402a-8e9f-6c5ff15796b7\/<\/a><\/address>\n","protected":false},"excerpt":{"rendered":"<p>Scenario: You have installed a SharePoint farm and life is great in your company with you being the only person who looks after that farm! Your employer is kind enough to hire a new resource to help you out. You have been asked to make the new hire a farm admin too. Problem: Adding additional [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[36],"tags":[],"class_list":["post-1205","post","type-post","status-publish","format-standard","hentry","category-sharepoint-2010"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Adding Additional Farm Admins to an Existing Farm - Reza Alirezaei&#039;s Blog %<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Reza Alirezaei\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2012\\\/03\\\/07\\\/adding-additional-farm-admins-to-an-existing-farm\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2012\\\/03\\\/07\\\/adding-additional-farm-admins-to-an-existing-farm\\\/\"},\"author\":{\"name\":\"Reza Alirezaei\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#\\\/schema\\\/person\\\/cdbb24d283697a65951cb4a14e474938\"},\"headline\":\"Adding Additional Farm Admins to an Existing Farm\",\"datePublished\":\"2012-03-07T05:58:11+00:00\",\"dateModified\":\"2012-03-25T19:17:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2012\\\/03\\\/07\\\/adding-additional-farm-admins-to-an-existing-farm\\\/\"},\"wordCount\":521,\"commentCount\":2,\"image\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2012\\\/03\\\/07\\\/adding-additional-farm-admins-to-an-existing-farm\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/wp-content\\\/uploads\\\/2012\\\/03\\\/030712_0557_AddingAddit1.png\",\"articleSection\":[\"SharePoint 2010\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2012\\\/03\\\/07\\\/adding-additional-farm-admins-to-an-existing-farm\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2012\\\/03\\\/07\\\/adding-additional-farm-admins-to-an-existing-farm\\\/\",\"url\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2012\\\/03\\\/07\\\/adding-additional-farm-admins-to-an-existing-farm\\\/\",\"name\":\"Adding Additional Farm Admins to an Existing Farm - Reza Alirezaei's Blog %\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2012\\\/03\\\/07\\\/adding-additional-farm-admins-to-an-existing-farm\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2012\\\/03\\\/07\\\/adding-additional-farm-admins-to-an-existing-farm\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/wp-content\\\/uploads\\\/2012\\\/03\\\/030712_0557_AddingAddit1.png\",\"datePublished\":\"2012-03-07T05:58:11+00:00\",\"dateModified\":\"2012-03-25T19:17:03+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#\\\/schema\\\/person\\\/cdbb24d283697a65951cb4a14e474938\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2012\\\/03\\\/07\\\/adding-additional-farm-admins-to-an-existing-farm\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2012\\\/03\\\/07\\\/adding-additional-farm-admins-to-an-existing-farm\\\/#primaryimage\",\"url\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/wp-content\\\/uploads\\\/2012\\\/03\\\/030712_0557_AddingAddit1.png\",\"contentUrl\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/wp-content\\\/uploads\\\/2012\\\/03\\\/030712_0557_AddingAddit1.png\",\"width\":\"593\",\"height\":\"418\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#website\",\"url\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/\",\"name\":\"Reza Alirezaei's Blog\",\"description\":\"Blogging from the field!\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#\\\/schema\\\/person\\\/cdbb24d283697a65951cb4a14e474938\",\"name\":\"Reza Alirezaei\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g\",\"caption\":\"Reza Alirezaei\"},\"url\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/author\\\/rezaa\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Adding Additional Farm Admins to an Existing Farm - Reza Alirezaei's Blog %","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/","twitter_misc":{"Written by":"Reza Alirezaei","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/#article","isPartOf":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/"},"author":{"name":"Reza Alirezaei","@id":"https:\/\/blogs.devhorizon.com\/reza\/#\/schema\/person\/cdbb24d283697a65951cb4a14e474938"},"headline":"Adding Additional Farm Admins to an Existing Farm","datePublished":"2012-03-07T05:58:11+00:00","dateModified":"2012-03-25T19:17:03+00:00","mainEntityOfPage":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/"},"wordCount":521,"commentCount":2,"image":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/#primaryimage"},"thumbnailUrl":"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2012\/03\/030712_0557_AddingAddit1.png","articleSection":["SharePoint 2010"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/","url":"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/","name":"Adding Additional Farm Admins to an Existing Farm - Reza Alirezaei's Blog %","isPartOf":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/#primaryimage"},"image":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/#primaryimage"},"thumbnailUrl":"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2012\/03\/030712_0557_AddingAddit1.png","datePublished":"2012-03-07T05:58:11+00:00","dateModified":"2012-03-25T19:17:03+00:00","author":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/#\/schema\/person\/cdbb24d283697a65951cb4a14e474938"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogs.devhorizon.com\/reza\/2012\/03\/07\/adding-additional-farm-admins-to-an-existing-farm\/#primaryimage","url":"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2012\/03\/030712_0557_AddingAddit1.png","contentUrl":"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2012\/03\/030712_0557_AddingAddit1.png","width":"593","height":"418"},{"@type":"WebSite","@id":"https:\/\/blogs.devhorizon.com\/reza\/#website","url":"https:\/\/blogs.devhorizon.com\/reza\/","name":"Reza Alirezaei's Blog","description":"Blogging from the field!","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blogs.devhorizon.com\/reza\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blogs.devhorizon.com\/reza\/#\/schema\/person\/cdbb24d283697a65951cb4a14e474938","name":"Reza Alirezaei","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g","caption":"Reza Alirezaei"},"url":"https:\/\/blogs.devhorizon.com\/reza\/author\/rezaa\/"}]}},"_links":{"self":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts\/1205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/comments?post=1205"}],"version-history":[{"count":23,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts\/1205\/revisions"}],"predecessor-version":[{"id":1208,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts\/1205\/revisions\/1208"}],"wp:attachment":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/media?parent=1205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/categories?post=1205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/tags?post=1205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}