Re: Minimum rights for SQL Agent

From: Hari (hari_prasad_k_at_hotmail.com)
Date: 02/25/04 

Date: Wed, 25 Feb 2004 09:19:25 +0530

Hi,

Do not run SQL Server and SQL Agent services as local system, local
administrator, or domain administrator accounts.

If your services starts based on above, most of the jobs which require an OS
level admin previlages will fail.
Eg:
1. Using XP_CMDSHELL wrting into hard drives, Registry read/write/delete...
 2. SQL Agent connection to SQL Server with Admini prev.

Go thru the below link for more information on setting up security,

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/sql/maintain/security/sp3sec/SP3SEC02.ASP

Thanks
Hari
MCDBA

"Bruce Rhoades" <bruce.rhoades@gdsinc.com> wrote in message
news:eI8S4C0#DHA.2484@TK2MSFTNGP12.phx.gbl...
> Hi,
> Here is a problem:
> SQL 2000 servers on Win 2000 servers in NT4 Domain
> Security restrictions exclude Everyone group from all the shares and
> registries.
> The SQL agent and SQL Server service accounts should NOT be Local or
Domain
> Administrative privileges.
>
> What are the minimum rights and registry access required for these
accounts
> in order to operate?
>
> Any help is greatly appreciated.
>
> Regards,
> JD
>
>

Relevant Pages

  • Re: Domain Groups For Clustering Service ???? SQL Server 2005
    ... Microsoft SQL Server September 2005 Community Technology Preview ... > and then put the Service Account named as SQLService and administrator ... >>> add accounts to the domain groups. ...
    (microsoft.public.sqlserver.clustering)
  • Re: Confusion over SQL Server Agent Service Account
    ... "The SQL Server Agent account must have administrator privileges if you ... SQL Server administrator, or if you use the AutoRestart feature. ... Consider using two seperate accounts for SQL Server and Agent since the ...
    (microsoft.public.sqlserver.setup)
  • Re: Confusion over SQL Server Agent Service Account
    ... If you are using SQL Server 2005 here is the information you are seeking... ... "The SQL Server Agent account must have administrator privileges if you ... Server administrator, or if you use the AutoRestart feature. ... Consider using two seperate accounts for SQL Server and Agent since the SQL ...
    (microsoft.public.sqlserver.setup)
  • AUTHENTICATION TO APPLY SP3
    ... SQL Server 2000 RTM Standard Edition ... - Logged on as administrator ... windows user. ... These accounts and passwords are good because I can get ...
    (microsoft.public.sqlserver.security)
  • Re: Newbie question on SQL connection
    ... > Let me educate you about SQL Server security. ... granting permissions to these accounts in SQL ... > maintain its own user accounts, which are separate from domain user ...
    (microsoft.public.dotnet.framework.aspnet)