Re: What privileges do my SQL services need?

From: Richard Waymire [MSFT] (
Date: 07/15/04

Date: Thu, 15 Jul 2004 12:11:21 -0700;en-us;Q283811 is the best
source of info, along with this reference in the sp3 version of the books

Richard Waymire, MCSE, MCDBA
This posting is provided "AS IS" with no warranties, and confers no rights.
"Katerina" <> wrote in message
>I have done some reading mostly on the Microsoft page and am getting
> what seems to be conflicting guidance on what privileges the SQL
> services need.  I am looking at the SQL Server Service and the SQL
> Server Agent Service.  Most articles say to run these with the minimal
> permission and that is what I would like to do.  It sounds like the
> SQL Server Service can run as just a user but the Agent may need more.
> Some guidance says not to run the agent as a local system, local
> admin or domain account.  Another article from the MSDN page "Starting
> SQLServerAgent Service" says that the domain account must be a member
> of the sysadmin role.  The same article also has a note that says for
> maximum security; configure the service account for SQL Agent as a
> domain account in the Administrators local group. In addition, connect
> the SQL Agent host account to SQL Server using integrated
> authentication, and set the proxy account. For more information, see
> xp_sqlagent_proxy_account.
> Can you help me determine what privileges my Agent service needs? I am
> using a domain account.  I did some testing and it appears that I need
> to have the domain account in the sysadmin group to start the agent
> service if it is not a member of the local admin group.  What I am
> concerned about is what privileges it needs for DTS, Replication and
> Linked Servers.