Re: What privileges do my SQL services need?

From: Richard Waymire [MSFT] (rwaymi_at_online.microsoft.com)
Date: 07/15/04


Date: Thu, 15 Jul 2004 12:11:21 -0700

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q283811 is the best
source of info, along with this reference in the sp3 version of the books
online:
mk:@MSITStore:C:\Program%20Files\Microsoft%20SQL%20Server\80\Tools\Books\instsql.chm::/in_overview_6k1f.htm

-- 
Richard Waymire, MCSE, MCDBA
This posting is provided "AS IS" with no warranties, and confers no rights.
"Katerina" <tkwood@energy-northwest.com> wrote in message 
news:7dc9735e.0407150909.66cb60d4@posting.google.com...
>I have done some reading mostly on the Microsoft page and am getting
> what seems to be conflicting guidance on what privileges the SQL
> services need.  I am looking at the SQL Server Service and the SQL
> Server Agent Service.  Most articles say to run these with the minimal
> permission and that is what I would like to do.  It sounds like the
> SQL Server Service can run as just a user but the Agent may need more.
> Some guidance says not to run the agent as a local system, local
> admin or domain account.  Another article from the MSDN page "Starting
> SQLServerAgent Service" says that the domain account must be a member
> of the sysadmin role.  The same article also has a note that says for
> maximum security; configure the service account for SQL Agent as a
> domain account in the Administrators local group. In addition, connect
> the SQL Agent host account to SQL Server using integrated
> authentication, and set the proxy account. For more information, see
> xp_sqlagent_proxy_account.
>
> Can you help me determine what privileges my Agent service needs? I am
> using a domain account.  I did some testing and it appears that I need
> to have the domain account in the sysadmin group to start the agent
> service if it is not a member of the local admin group.  What I am
> concerned about is what privileges it needs for DTS, Replication and
> Linked Servers.