User permissions for BizTalk server

Question

I've got my dev machine with BizTalk running as local administrator, and I get the warning that it should be ... but I still do

But what's the best security group to put the BizTalk user in on a "live" server ?

Answer 1

BizTalk Application Users.

Check the BizTalk 2006 R2 installation guide.

Answer 2

I second Rodrigo's recommendation of looking at the installation guide. However, I'll also add that in most live environments you'll want to do a good security planning before installing, as a secure and functional deployment can be complex.

In particular, play close attention to the permissions required by each person interacting with BizTalk (sysadmins, sql admins, etc) and make sure you define separate accounts for each service / host and how they should be configured.

Normally, you'll deploy BizTalk with at least two separate machines (one running SQL server for the databases and one running BizTalk itself). This requires that you define your BizTalk accounts and security groups before hand and that you create them in your AD infrastructure before deployment, so make sure you get that right.

Even if you're going to deploy everything to a single server, make sure you use domain accounts for everything and don't skip the security planning. This will make it a lot easier to later move to a multi-server deployment without having to start from scratch.