What account to use for SharePoint 2010 Timer Job

Question

what account do you run the SharePoint 2010 Timer Job service under?

Do you use the farm account or a separate one or just local service?

Currently I use the farm account but the health analyzer says, it's not a good idea to use an account that has local administration permissions.

Regards, Alex

Solution 1

Technet - Account permissions and security settings (SharePoint Server 2010)

See Farm service account

The server farm account is also referred to as the database access account and is used as the application pool identity for Central Administration, and as the process account for the Microsoft SharePoint Foundation 2010 Timer service. The server farm account requires the following permissions:

Solution 2

The timer service needs access to the databases. That's the main thing. There's a separate service (SPAdminV4) which is used for local-admin operations. This approach keeps the vast majority of the code away from admin privileges. So yes, you really do want to use a different account for security reasons.