Re: SQL \ windows account

From: GS (Gennadiy.sayenko@med.nyu.edu)
Date: 01/09/03


From: "GS" <Gennadiy.sayenko@med.nyu.edu>
Date: Thu, 9 Jan 2003 07:30:46 -0800


Can the account to run SQL server belong to USER group or
it is better to have it as "POWER USER" built in group.
Thanks.

>-----Original Message-----
>SQL Service account absoloutely does NOT have
>to be a member of the local administrators group.
>For some functionality, SQL Agent service does
>require membership of the administrators local group
>and it can cause more problems than it's worth not
>to make it a local admin, certainly in some replication
>scenario's. The rights required by the SQL Service
>will be granted to the accoun you designate upon
>install or if you use Enterprise Manager to change
>the service account. It is best to use a dedicated
>account where the password doesn't expire and the
>user can't change the password options set.
>
>--
>HTH
>
>Jasper Smith (SQL Server MVP)
>
>I support PASS - the definitive, global
>community for SQL Server professionals -
>http://www.sqlpass.org
>
>"Gennadiy" <Gennadiy.sayenko@med.nyu.edu> wrote in message
>news:1fd901c2b749$1f043420$89f82ecf@TK2MSFTNGXA01...
>> I know it is not a good idea to let SQl Server and SQL
>> Agent run under System account.
>> Why it is better to have it under local administrator
>> account (which also has full permissions)?
>> I happened to be a box and DB admin and i have a local
>> admin account which i use. Shell i create another admin
>> account to separate SQL from Windows, if yes, then WHY?
>> It is still me? Should i run SQL server under other
>> accounts with limited permissions ( like power user )?
>> Any help is greatly appreciated.
>> GS
>>
>
>
>.
>



Relevant Pages

  • Re: Error 15401 using sp_grantlogin (not addressed by current KB articles)
    ... Restarting Windows 2000 resolved the problem for this particular account, ... confused when it sees a duplicate SID. ... > One way to get SQL Server to agree with the renamed NT ... > Preview (to ensure the script was created), ...
    (microsoft.public.sqlserver.security)
  • Re: SharePoint V3 Install Error
    ... But it our case it had to do with Group Policies that forbid the account of ... WSS FAQ:www.wssv3faq.com/wss.collutions.com ... Event Source: WindowsSharePointServices3Search ... whatever you are installing WSS as sufficient rights to the SQL Server ...
    (microsoft.public.sharepoint.windowsservices)
  • RE: Problems with WebParts
    ... to a database called aspnetdb. ... > The connection string specifies a local SQL Server Express instance using a ... > server account must have read and write access to the applications directory. ... > This is necessary because the web server account will automatically create ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Cannot connect to Query Analyzer
    ... For Query Analyzer, I tried replacing the file as you suggested but had the ... same results (Enterprise Manager starts up fine, ... I created an account on my laptop and changed SQL ... Try replacing the MMC app for SQL Server from the original ...
    (microsoft.public.sqlserver.connect)
  • Re: Does anyone know how to fix this??
    ... > Inside the Active Directory Users and Computers in the folder of SYSTEM I ... Give the site's SMS Service account full control rights to the ... MP encountered an error when connecting to SQL Server. ...
    (microsoft.public.sms.setup)