Re: SQL Service Accounts

From: Byron Hynes (bph@byronetta.com)
Date: 10/29/02


From: Byron Hynes <bph@byronetta.com>
Date: Tue, 29 Oct 2002 10:21:56 -0800


"Richard Waymire [MS]" <rwaymi_ms@microsoft.com> wrote (29 Oct 2002):

> If the user is not a sysadmin then they'll probably need access to a
> proxy account - you can configure that on the server properties ->
> security tab in Enterprise manager.
>

Richard,

Once a system moves into production, isn't it a good idea to consider
having the sa own the job?

I mean, if it's not an sa job, should it be on the server, and if it is,
why should it be left with non-priveledged users? Or, on the other hand, is
having all jobs owned by sa violating the "least required privelege" idea?

- Byron

--
-----------------------------------------------------------------
Byron P Hynes
"He who exercises government by means of his virtue may be       
compared to the north polar star, which keeps its place and      
all the stars turn towards it." --Confucius                      
-----------------------------------------------------------------