Performing a SAP Domain Installation without Being a Domain Administrator

We normally perform a domain installation of the SAP system with a user who is a member of
the domain Admins group.

If for any reason, the account used for the installation is not a member of the domain Admins
group, we can perform the installation with a domain user who is a member of the local
Administrators group.

In this case, the domain administrator has to prepare the system appropriately for SAP BASIS
Administrator. The domain administrator can perform the following steps either using the
installer or manually.

Create below new global groups – SAP_TST_GlobalAdmin

Creating the Required Users and Groups Manually

a. Creating the New Global Group SAP_TST_GlobalAdmin

• Log on as a Domain Administrator
• Start the Active Directory Users and Computers Console by choosing: Start -> Control Panel -> Administrative Tools -> Active Directory Users and Computers.
• Right-click Users in Tree, and choose NewGroup
• Enter the following: Group name: SAP_TST_GlobalAdmin
• Note: Enter the SAP TST Global Admin group exactly as specified in the correct uppercase and lowercase.
• Select the following: I.  Group scope: Global & II. Group type: Security
• Choose OK

b.   Creating the New SAP System Users TSTadm and SAPServiceTST

• In Active Directory Users and Computers Console, right-click Users in Tree and choose: New ->User
• Enter the following:
• Choose Next and Enter the following: Password: XXXXX & Confirm password: XXXXX
• Note: Consult BASIS team for the password to be set.
• Select Password never expires.
• Note: Make sure no other option is selected.
• Choose OK

c.   Adding the TSTadm User to the SAP_TST_GlobalAdmin Group

• In the Users folder, double-click the newly created user account TSTadm in the list on the right.
• Choose Member -> Add.
• Select the new SAP_TST_GlobalAdmin group and choose Add to add it to the list.
• Note: By default, the user is also a member of the Domain Users group.
• Select Password never expires.
• Note: Make sure no other option is selected.
• Choose OK twice.

d.   Adding the SAPServiceTST User to the SAP_TST_GlobalAdmin Group

• In the Users folder, double-click the newly created user account SAPServiceTST in the list on the right.
• Choose Member -> Add.
• Select the new SAP_TST_GlobalAdmin group.
• Choose Add to add it to the list, and then OK.
• Choose OK to close SAPServiceTST Properties.
• Close the Active Directory Users and Computers Management Console.