·The account used to install ControlPoint:
§must be a member of the local Administrator's group on the machine where it is installed
§must be a Farm Administrator, and
§should be added to the security server role sysadmin in:
§the SQL server(s) used for SharePoint content databases, and
§the SQL server used for the ControlPoint Services (xcAdmin) database.
·The account that will be used to run ControlPoint (that is the Service Account of the Web Application that hosts the ControlPoint Configuration Site) must be:
§a member of the local Administrator's group on all of the Web front-end machines in the farm.
§a Farm Administrator.
§a domain account if any database resides on a different server(s) from the server on which you will be installing ControlPoint.
·The account used to install ControlPoint and the ControlPoint Service Account must both be either local or domain accounts. This is necessary to enable the installer to verify the existence of the execution account. If the server on which you are installing ControlPoint is not your database server (that is, your databases reside on a different server), then the Service Account must be a domain account.
·In accordance with SharePoint Best Practices, the ControlPoint Service Account should not be the SharePoint Farm Account (that is, the account used to run Central Administration), as the performance of some ControlPoint operations may be negatively impacted.
·If you will be configuring ControlPoint Discovery and/or SCM Services, the Service Account must meet all of the requirements of the ControlPoint Service Account, as well as permission to Run as a Service.