Security Baseline Analyzer

From: Ray Higdon (rayhigdon_at_higdonconsulting.com)
Date: 07/02/03 

Date: Wed, 2 Jul 2003 12:55:32 -0700

Are you saying that you ran the MSBA before you changed
the services accounts and you didn't get these errors?
Then when you changed them you did?

Ray Higdon MCSE, MCDBA, CCNA

>-----Original Message-----
>Good evening/morning,
>
>I'm using the Baseline Analyzer to help in securing a SBS
>2000 server. I implemented the advice of creating a
>dedicated SQL Server account and setting the SQLSERVER and
>SQLAgent services to start up with that account. Upon
>doing so the SBA reported the errors listed below... Any
>insight on why the errors occur would be appreciated!
>
>1. ISSUE: Folder Permissions
>
>RESULT: Permissions on the SQL Server installation folders
>are not set properly.
>
>ERROR IN DETAIL: USER - Invalid SID returned by the OS
>
>2. ISSUE: Service Accounts
>
>RESULT: SQL Server and/or SQL Server Agent Services
>accounts are members of the local Administrators group or
>run as LocalSystem.
>
>ERROR: This is a Domain Account. Baseline Security
>Analyzer cannot determine whether it belongs to the Domain
>Admins group due to the following error: 122 The data area
>passed to a system call is too small.
>
>
>Thank you for your time in advance!
>
>Sincerely,
>Bosko Maksimovic
>
>
>.
>

Relevant Pages

  • Re: Security Baseline Analyzer
    ... > the services accounts and you didn't get these errors? ... >>I'm using the Baseline Analyzer to help in securing a SBS ...
    (microsoft.public.sqlserver.security)
  • Licensing
    ... services accounts need a CAL? ... Is it the case that the administrator account itself consumes a CAL, ... the original 5 off CALs be used as a Device CAL? ...
    (microsoft.public.windows.server.sbs)
  • Re: Newbie question on SQL connection
    ... > Let me educate you about SQL Server security. ... granting permissions to these accounts in SQL ... > maintain its own user accounts, which are separate from domain user ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Sql server 2005 clustered service group
    ... For each clustered service in the instance of SQL Server that you are ... administrator for the names of existing domain groups, ... Note that SQL Server accounts will not be removed from the groups if SQL ... I see with installing SS2005 cluster if forces me to use domain accounts ...
    (microsoft.public.sqlserver.setup)
  • Re: Domain Groups For Clustering Service ???? SQL Server 2005
    ... You need to manually add the service accounts you specify during setup into ... services then just add that to each of the 3 domain groups you create. ... Jasper Smith (SQL Server MVP) ...
    (microsoft.public.sqlserver.clustering)