Re: Account to start and run SQL Server

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 10/17/03 

Date: Thu, 16 Oct 2003 20:17:00 -0600

Check the following article:
Microsoft SQL Server 2000 SP3 Security Features and Best
Practices
http://www.microsoft.com/technet/prodtechnol/sql/maintain/security/sp3sec/default.asp

You can also get some good information by reading through
the following knowledge base article as it explains some of
what's going on with the security settings and when you need
to explicitly add the service account(s) to the sysadmin
role:
HOW TO: Change the SQL Server or SQL Server Agent Service
Account Without Using SQL Enterprise Manager in SQL Server
2000
http://support.microsoft.com/?id=283811

-Sue

On Thu, 16 Oct 2003 15:48:02 -0700, "Gary Hughes"
<anonymous@discussions.microsoft.com> wrote:

>Am looking for a best practice as to setting up a domain
>account to start and run SQL Server. I was told that this
>account should not be a member of domain admins or
>administrators but that it must be a domain account. What
>NT permissions are required for this account? Would the
>account need to be a member of sysadmins in SQL?
>
>Sorry for all the questions. Is there a best practices
>white paper or some step-by-step guide to security that
>someone could point me to?
>
>Thanks in advance

Relevant Pages

  • Re: Error 15401 using sp_grantlogin (not addressed by current KB articles)
    ... Restarting Windows 2000 resolved the problem for this particular account, ... confused when it sees a duplicate SID. ... > One way to get SQL Server to agree with the renamed NT ... > Preview (to ensure the script was created), ...
    (microsoft.public.sqlserver.security)
  • Re: SharePoint V3 Install Error
    ... But it our case it had to do with Group Policies that forbid the account of ... WSS FAQ:www.wssv3faq.com/wss.collutions.com ... Event Source: WindowsSharePointServices3Search ... whatever you are installing WSS as sufficient rights to the SQL Server ...
    (microsoft.public.sharepoint.windowsservices)
  • RE: Problems with WebParts
    ... to a database called aspnetdb. ... > The connection string specifies a local SQL Server Express instance using a ... > server account must have read and write access to the applications directory. ... > This is necessary because the web server account will automatically create ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Cannot connect to Query Analyzer
    ... For Query Analyzer, I tried replacing the file as you suggested but had the ... same results (Enterprise Manager starts up fine, ... I created an account on my laptop and changed SQL ... Try replacing the MMC app for SQL Server from the original ...
    (microsoft.public.sqlserver.connect)
  • Re: Does anyone know how to fix this??
    ... > Inside the Active Directory Users and Computers in the folder of SYSTEM I ... Give the site's SMS Service account full control rights to the ... MP encountered an error when connecting to SQL Server. ...
    (microsoft.public.sms.setup)
Quantcast