Single vs. Unique Domain accounts to run SQL services?

From: Matt (mcijobs@hotmail.com)
Date: 09/18/02


From: "Matt" <mcijobs@hotmail.com>
Date: Wed, 18 Sep 2002 09:29:41 -0700


Hello,

I am running several SQL servers in active directory. I
am curious what is the safest type of service account.
Should I use a single domain "service" (user) account to
run SQL and SQL Agent on all of my production boxes?

My worry is that anyone could try and login via this
account with bad passwords 3 times and the user account
would be locked out at the domain level.
I am sending mail so I beleive local system account is out.

Option?
Create seperate domain user accounts for each production
server? It would increase in managment but might be more
secure?

Thanks in advance.
Matt



Relevant Pages

  • Troubleshooting Multiple SPNs on a SQL Server
    ... Firstly I'm don;t know a great deal about SQL Server so I'm feeling my way ... Instance 1 runs under local system account ... Instance 3 runs under the same service account in Active Directory ...
    (microsoft.public.sqlserver.setup)
  • Re: Funky Permissions Issue with ReplData Folder
    ... I've explicitly granted full control of the ReplData share to the SQL ... Service account as well as the SQL Agent account. ...
    (microsoft.public.sqlserver.replication)
  • Re: sql problem
    ... Account # is the link field on ... The requirement is I have to come up with a report comparing the two ... customer tables to see if they are in sync. ... what I wanted to do was to get the SQL to return the "like" names ...
    (comp.databases.oracle.server)
  • Re: sql problem
    ... Account # is the link field on ... table1, table2@dblink where ....) ... customer tables to see if they are in sync. ... what I wanted to do was to get the SQL to return the "like" names ...
    (comp.databases.oracle.server)
  • Re: sql problem
    ... Account # is the link field on ... table1, table2@dblink where ....) ... customer tables to see if they are in sync. ... what I wanted to do was to get the SQL to return the "like" ...
    (comp.databases.oracle.server)