So after really beating my head on the table for a while my conclusion is you cannot install MOSS 2007 or WSS v3 in an NT 4.0 domain as anything but a single server. If you choose multiserver you will get the error below. I got this error while trying to connect to the SQL Server using windows authentication in the configuration wizard. :(
01/09/2007 10:36:27 10 ERR Exception: System.Security.Principal.IdentityNotMappedException: Some or all identity references could not be translated.
at System.Security.Principal.NTAccount.Translate(IdentityReferenceCollection sourceAccounts, Type targetType, Boolean forceSuccess)
at System.Security.Principal.NTAccount.Translate(Type targetType)
at Microsoft.SharePoint.Administration.SPProcessIdentity.GetMachineRelativeSecurityIdentifier(SPServer server, Boolean& isMachineAccount)
at Microsoft.SharePoint.Administration.SPFarm.CreateBasicServices(SqlConnectionStringBuilder administrationContentDatabase, IdentityType identityType, String farmUser, SecureString farmPassword)
at Microsoft.SharePoint.Administration.SPFarm.Create(SqlConnectionStringBuilder configurationDatabase, SqlConnectionStringBuilder administrationContentDatabase, IdentityType identityType, String farmUser, SecureString farmPassword)
at Microsoft.SharePoint.Administration.SPFarm.Create(SqlConnectionStringBuilder configurationDatabase, SqlConnectionStringBuilder administrationContentDatabase, String farmUser, SecureString farmPassword)
Now this is my professional opinion because as best I can tell there is no official Microsoft position on this. If you are on an NT4 domain and really want to try using 1 SharePoint server and 1 SQL server you may be able to use SQL authentication but no promises there. It seems that SharePoint considers NT4 to be the same as a workgroup.
Hope this saves someone some grief.
Shane – SharePoint Help
So you may have noticed that unlike SharePoint Portal 2003 MOSS 2007 does not just give all server administrators full control of everything. While most of this think it is a good thing I have already been asked several times "How do I make it so all of the administrators are SharePoint admins also?"
Well far be it from me to try and talk you out of it (unless you are my client) so I will just give you the quick answer.
To grant a user or group administrator access to a given web application do as follows.
- Go to SharePoint Central Administration.
- Click on the Application Management tab.
- Under Application Security click on Policy for Web Application
- Click Add Users
- Confirm your settings on the screen (defaults should be what you want) and click Next
- Now enter your user or group of users
- Click the box beside Full Control – Has full control.
- Click Finish
Now all of your specified users have full control over the entire web application as they did in SPS 2003.
Shane – SharePoint Help