Re: Running SQLServer and SQLServer Agent as Power User

From: Hansde Bruin (hans_at_nl.invalid)
Date: 03/24/05


Date: Thu, 24 Mar 2005 22:57:46 +0100

gbledsoe wrote:
> We're trying to limit the number of user accounts with Admin level permission
> on our Win2K servers, especially SQL servers. We have created a domain level
> account to run SQLServer and SQLAgent. We'd like to limit it to Power User
> status instead of Admin status on the servers, but we cannot seem to start
> and stop the services from SEM with only Power User status. We've checked
> registry key permissions and everything seems to be configured properly. Is
> this configuration even possible? Or does this account NEED to be local admin
> on the server? Help would be appreciated. Thanks.

It should be, although not all sql feature are available. I am running
multiple instances with different plain domain user accounts. When you are
not sure about registry, user and ntfs permission change the account using
the enterprise manager.
When you need the proxy account to run scheduled dts packages create a
separate account for the sql agent service and make it local admin, unless
someone here can explain how to accomplice this without local admin rights.

have a look at this one:

http://support.microsoft.com/default.aspx?scid=kb;en-us;283811&sd=tech

-- 
Hans


Relevant Pages

  • Re: Forest to Child -- Permissions
    ... My account can login to all the DCs and has full administrator priv. ... first DC in the root. ... the member servers only ... never happen unless some admin has been mucking about. ...
    (microsoft.public.windows.server.dns)
  • Re: Forest to Child -- Permissions
    ... My account can login to all the DCs and has full administrator priv. ... first DC in the root. ... the member servers only ... never happen unless some admin has been mucking about. ...
    (microsoft.public.windows.server.dns)
  • Re: New install, login not accepted
    ... I tried to upgrade the site, which was running with MSDE, to SQL ... install SPS. ... I got through the install following the steps in the Admin. ... a admin account, that account needs admin rights to SQL and the local ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Delegation problems
    ... What account is running SQL? ... appropriate SPNs. ... then it depends on how you are connecting to SQL. ... I have several other servers running SQL and the SQL ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Server admin/service account - too many users
    ... You never use the "administrator" account ... For programs such as SQL and Veritas or any other program ... Win2003 AD server and 5 Win2000 member servers performing various ... account password, services will not run such as SQL2000, Veritas ...
    (microsoft.public.windows.server.general)