Microsoft Sharepoint Products and Technologies Resource Kit eBook

702 Part VIII: Securing SharePoint Products and Technologies
“Configure the Single Sign-On Settings on the Job Server.” However, it is useful to
notice the rights that this account will have after it has been specified as the enterprise
application manager account, as follows:
■ This account or members of this group have rights to create, modify, or delete
application definitions from the single sign-on administration pages.
■ This account or members of this group do not have rights to configure single
sign-on. Only members of the single sign-on administrator account can configure
single sign-on.
■ Rights that this user or members of this group have are automatically contained
in the single sign-on administrator account.
Step 2: Enable the Single Sign-On Service on the Job Server
To enable the SSOSrv service, do the following on the job server:
1. On the taskbar, click Start, point to Administrative Tools, and then click
Services.
2. On the Services management console, double-click Microsoft Single Sign-on
Service.
3. Click the Logon tab.
4. Under Log on as, click This account.
5. In the This account box, type an account name that you determined as a single
sign-on service account in the previous step.
6. In the Password and Confirm password boxes, type the password.
7. Click Apply.
8. Click the General tab.
9. In the Startup type list, click Automatic.
10. In the Service status section, if the service status does not display Started,
click Start.
11. Click OK.
Step 3: Configure the Single Sign-On Settings on the Job Server
To configure the single sign-on settings, you must be logged on as the configuration
account on the job server. As we discussed earlier in step 1, “Set Up Single Sign-On
Accounts,” this account must be a member of the local Administrators group on the
job server, and must also be a member of the group account that you specify as the
single sign-on administrator account.