Re: Does MSSQL service account rights

From: Rod Bautista (rod.bautista_at_adam-us.com)
Date: 08/20/04 

Date: Fri, 20 Aug 2004 09:14:18 -0700

Thanks.
To clarify, I understand that the service account does not have to be a
local administrator on the machine, but does it have to be a member of the
sysadmin fixed server role?
I have a SQL Server that runs under a domain account. This SQL Server has
BUILTIN\Administrators removed from the system administrators role. The
domain account used to start the MSSQL service is not a member of the
sysadmin role. Curiously, the SQL Server runs without issue. This tells me
that membership in the sysadmin role is not required. However, if this same
account was used to start the SQL Server AGent, would it then be required to
have membership in the sysadmin role?
"Dejan Sarka" <dejan_please_reply_to_newsgroups.sarka@avtenta.si> wrote in
message news:OyhMAFPhEHA.3612@TK2MSFTNGP12.phx.gbl...
> No - al permisions that it needs are listed in Books OnLine, topic
"Setting
> up Windows Services Accounts"
>
(mk:@MSITStore:C:\Program%20Files\Microsoft%20SQL%20Server\80\Tools\Books\in
> stsql.chm::/in_overview_6k1f.htm).
>
> --
> Dejan Sarka, SQL Server MVP
> Associate Mentor
> Solid Quality Learning
> More than just Training
> www.SolidQualityLearning.com
>
> "Rod Bautista" <rod.bautista@adam-us.com> wrote in message
> news:Oq5Hx4KhEHA.1344@TK2MSFTNGP11.phx.gbl...
> > Does the MSSQL Service domain service account have to be a member of the
> > system administrators role?
> >
> >
>
>

Relevant Pages

  • Re: Getting the sa password with SQLDMO
    ... SQL Server stores passwords using a one-way hash so you can't read the ... conditional password change by attempting a connection using the expected sa ... password and, if it fails, connect using a different sysadmin role member ... member can change the sa password. ...
    (microsoft.public.sqlserver.programming)
  • Re: Discrepancy in number of rows and size of database
    ... How do I make sure that I'm a member of the SysAdmin role? ... with this tool you can catch all commands SQL Server is receiving. ... >> I'm trying to help a customer extract some data out of their SQL Server ...
    (microsoft.public.sqlserver.server)
  • Re: Other way of Changing Password if does not have Server Role
    ... A user can change his password without being a member of the sysadmin role. ... You just have to login as the user and then omit the 3rd parameter ... Dejan Sarka, SQL Server MVP ...
    (microsoft.public.sqlserver.security)
  • Re: DTS Sucess but fails to go to next step when scheduled
    ... If == a member of the sysadmin role then log in as the account under which the ... Now try the package ... If!= A member of the sysadmin rol then log in as the proxy accunt and try the ... Allan Mitchell MCSE,MCDBA, (Microsoft SQL Server MVP) www.SQLDTS.com - The site for all your DTS needs. ...
    (microsoft.public.sqlserver.dts)
  • Re: DTS wont run as scheduled job (DTSStepExecStat_Completed)
    ... Member of the sysadmin role? ... You said you ran the job as sa and it workd then this would suggest that the job ran as the service account and was fine. ... This would also suggest that the current owner is not being translated to the same service account and is using the proxy account. ...
    (microsoft.public.sqlserver.dts)