Re: Replication on Sql Server 2k - Sql Server Agent Account

From: Patrick Andry (pandry@wolverinefreight.ca)
Date: 07/04/02 

Date: Thu, 04 Jul 2002 15:54:33 -0400
From: Patrick Andry <pandry@wolverinefreight.ca>
To: focus-ms@securityfocus.com

What I do is create an account with an excruciatingly long name. I usually
generate the password by pulling two random numbers, one between 1 and 340 and
one between 3 and 8, grab my old college mathbook, flip to the page of the first
number, and use a twenty character password comprised of every nth letter or
number on the page.

In short, use an account other than the administrator's, make the username and
password safe from dictionary attacks, but still easily remembered, as you will
most likely want to use this account for all services(I put the two numbers in
the comments field) and lots of logging on the account.

This will fill your event log, but make tracking down any problems much easier
as well.

Eder L. Marques wrote:
> Hi guys.
>
> I am implementing SQL Replication in a win2k server box. For this, the
> account of the service (SQL server Agent) is running requeries
> Administrator privilegies. What the best solution, in security terms : Add
> the system account at administrator group or to run the service with other
> account?
>
> Regards,
>
> Eder L. Marques
> System Administrator

Relevant Pages