Which Account to run SQL Service under? Best Practice?

From: Jason Mauss (jason.mauss_at_nospamgmail.com)
Date: 03/29/05 

Date: Tue, 29 Mar 2005 10:20:28 -0800

I'm going to be performing some SQL Server 2000 installations and I know
that during the setup process you are asked to specify which account the SQL
Server service should run under. Is it best (or not) to run under the Local
System account or an actual domain user?

I'm thinking it's best to use the Local System since the domain user could
(for some reason) be removed or have their password changed, etc.

Opinions/Thoughts?

Thanks,
Jason

Relevant Pages

  • Re: MSSQL HEllo bug
    ... Microsoft claims that the default for SQL Server 2000 is a domain user NOT ... domain account as the service account during the installation phase. ... exists OR simply click the LocalSystem radio button to save themselves the ...
    (NT-Bugtraq)
  • Re: SQL Service account rights
    ... I create a domain user account for each. ... administrator on the SQL Server machine. ... > I'd like to hear everyone's opinion on what rights a SQL server & SQL ...
    (microsoft.public.sqlserver.security)
  • Re: Problem installing SQL Server 2000 Developer Edition on Windows XP
    ... Install SQL server using Local system account. ... SQL Server Log on service account to the Domain user using Control Panel .. ...
    (microsoft.public.sqlserver.setup)
  • Re: Web Applicaiton using Trusted Connections to SQL on different machine?
    ... use ASP.NET code to make the connection, or if i just use ASP code to make ... >> If my SQL server and Web Server are on the same box I can get it to ... >> Web Application (in my case the ASPNET or Network Services account). ... >> the new Domain user in the list of Tasks for the w3wp.exe. ...
    (microsoft.public.sqlserver.security)
  • Re: Web Applicaiton using Trusted Connections to SQL on different machine?
    ... use ASP.NET code to make the connection, or if i just use ASP code to make ... >> If my SQL server and Web Server are on the same box I can get it to ... >> Web Application (in my case the ASPNET or Network Services account). ... >> the new Domain user in the list of Tasks for the w3wp.exe. ...
    (microsoft.public.inetserver.iis.security)