Before installing Kaspersky Security 9.0 for Microsoft SharePoint Server , you must create a user account to run the services with its privileges. The account must have the following privileges:

• Local administrator privileges on the servers on which Kaspersky Security 9.0 for Microsoft SharePoint Server will be installed.
• SharePoint Farm Administrator privileges.

• SharePoint_Config and SharePoint_AdminContent_UID database permissions.

To grant database permissions to the user account, use one of the following methods:

• Use Microsoft SQL Server® Management Studio (or the utility Microsoft SQL Server Management Studio Express) to grant the db_owner role to the user account.
• In Microsoft PowerShell™, run the following script for each web application on the protected SharePoint portal:
  $wa = Get-SPWebApplication %%http://WebApp.domain.com%%
  $wa.GrantAccessToProcessIdentity(%%domain\KSH_User%%)
  $wa.Update()

• Local administrator privileges on the computer on which Kaspersky Security 9.0 for Microsoft SharePoint Server will be installed.
• SharePoint Farm Administrator privileges. If the user account does not have these privileges, the application will still be installed successfully, but the initial configuration will be impossible.
• SharePoint_Config and SharePoint_AdminContent_UID database permissions (similar to the privileges required for Kaspersky Security management user account). Without these privileges the anti-virus configuration of the SharePoint server will be impossible. The error message will appear at the final step of installation when the files are copied and the components are registered. When the error message appears, click Ignore in the dialog box. When the installation is completed, reboot the IIS service using the iisreset /restart command.

The account used for administration of Kaspersky Security 9.0 for Microsoft SharePoint Server must have the SharePoint Farm Administrator privileges as well as access to the Configuration folder which is located in the product installation folder (by default, the administrator account has the privileges to access it). Without these privileges, it will be impossible to connect the Administration Console to the Kaspersky Security services.

TCP protocol and port 5014 are used for connection between the Administration Console and the Protection Server. For Protection Server management, this port must be open.