The SMS Service account in both SMS 2.0 and 2003 must be used sparingly and only when necessary. Just as we try not to use the Administrator account on our domain servers we should try and take the heat off the SMS service account as well.
Because the service account and the administrations account are very powerful accounts and can wreak havoc if misused we must protect them as best we can. The SMS service account in particular has many process threads that rely on it and should be protected.
To take the heat off the SMS service account you should have the following accounts created otherwise the SMS service account will manage them:
Client Push Installation account – This account is used by the Client Configuration Manager to install the SMS client software on your machines.
Site Address account – This account is used for site to site communication and data transfers between sites in a parent child configuration.
Site System Connection account – This account is used by the SMS Site server(s) when connecting to its site systems.
No Comments