Re: What privileges do my SQL services need?
From: Richard Waymire [MSFT] (rwaymi_at_online.microsoft.com)
Date: Thu, 15 Jul 2004 12:11:21 -0700
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q283811 is the best
source of info, along with this reference in the sp3 version of the books
-- Richard Waymire, MCSE, MCDBA This posting is provided "AS IS" with no warranties, and confers no rights. "Katerina" <email@example.com> wrote in message news:firstname.lastname@example.org... >I have done some reading mostly on the Microsoft page and am getting > what seems to be conflicting guidance on what privileges the SQL > services need. I am looking at the SQL Server Service and the SQL > Server Agent Service. Most articles say to run these with the minimal > permission and that is what I would like to do. It sounds like the > SQL Server Service can run as just a user but the Agent may need more. > Some guidance says not to run the agent as a local system, local > admin or domain account. Another article from the MSDN page "Starting > SQLServerAgent Service" says that the domain account must be a member > of the sysadmin role. The same article also has a note that says for > maximum security; configure the service account for SQL Agent as a > domain account in the Administrators local group. In addition, connect > the SQL Agent host account to SQL Server using integrated > authentication, and set the proxy account. For more information, see > xp_sqlagent_proxy_account. > > Can you help me determine what privileges my Agent service needs? I am > using a domain account. I did some testing and it appears that I need > to have the domain account in the sysadmin group to start the agent > service if it is not a member of the local admin group. What I am > concerned about is what privileges it needs for DTS, Replication and > Linked Servers.