Securing SQL Server after administration installation

From: wickedw (mwaring_at_bentos.force9.co.uk)
Date: 10/04/05 

Date: 4 Oct 2005 12:12:41 -0700

Hello all,

I have just installed SQL Server using the administrator account and
mixed mode (I did not know any better).
Baseline analyser subsequently told me to sort myself out and use a
domain user account for both the SQL Server and SQL Server agent
services.

I followed the instructions (or tried to) by creating a user called
SQLservice via computer manager and adding them to the groups domain
and users (you'll have to excuse me but I did know not what a domain
user account was).

I then used enterprise manager to switch the SQL server and agent login
to the SQL service user, which seemed to work fine in principle.

Now, when I try to change certain options such as "auto start SQL
Server agent", I get a registry access error. I have read numerous
articles on the Web which tell you to create a domain user account and
give it access to registry options/directory paths etc, but I do not
know how to do this?
Could somebody please help?

In hindsight, would creating the SQL service user before installation
and using that instead of administrator have helped? (For example, I
have read SQL Server would have created the required permissions for
this user).
If so, can I uninstall and reinstall? Or is there any easier solution.

Basically, I would avoid going back to using administrator as the login
but need to be 110% sure that SQL Server will run correctly before I
spend the time installing all the required databases, as there will be
no going back on that point in terms of effort spent.

Somebody's help would be very much appreciate,

Best regards,

Matthew

Relevant Pages

  • Re: BULK Insert Problem
    ... Vyas, MVP (SQL Server) ... I Log on to my system using the Local System Administrator Account. ... And If I Try to Bulk Insert any thing from my ...
    (microsoft.public.sqlserver.programming)
  • Re: SQL Agent cannot run DTS packages that contain Analysis Services tasks
    ... >The source of the problem seems to be the Windows account the agent runs as. ... >into an administrator on the server where MS Analysis Services is installed. ... Darren Green (SQL Server MVP) ...
    (microsoft.public.sqlserver.dts)
  • Re: MSSQL$SBSMONITORING Login to Disabled Account?
    ... SQL Server installed, I can't have the tools you were using, can I? ... I still don't know what that process is doing trying to login to the ... Administrator account and I don't understand why this login attempt is ...
    (microsoft.public.windows.server.sbs)
  • Re: What Account Should Server Be Running?
    ... When SQL Server is installed it is installed as a service. ... Q. What account do I choose as the startup account? ... SQL Server and SQL Server Agent are installed as Windows services. ... During installation, you can choose which user account will be the startup ...
    (microsoft.public.sqlserver.server)
  • Re: Microsoft Search service cannot be administered under the present user error SP3
    ... - Have not modified Administrator account, but i ran the SQL script anyway. ... SQL account is not a local administrator. ... > has this server ever been upgrade from SQL Server 7.0 or is this SQL ...
    (microsoft.public.sqlserver.fulltext)