SQLMail and restricted service account

From: Geof (geofgeof_at_gmail.com)
Date: 10/20/05

  • Next message: fasttrack via SQLMonster.com: "sql server sp_addlogin from vb.net and security !!!!"
    Date: 20 Oct 2005 07:07:46 -0700
    
    

    Hello,

    In the FAQ about SQLMail, Microsoft said :
    http://support.microsoft.com/default.aspx?scid=kb;en-us;311231&sd=tech

    "To configure a mail profile for a service account, you must log on to
    the server by using that service account."

    This mean that this service account must be able to open a session on
    the server, and so we need to grant the right
    "SeInteractiveLogonRight", and may be that the service account be a
    member of the "domain users" group...

    OK, I can support giving this right only the time needed to configure
    the mail profile for my account, but if then I Revoke this right, and
    the service account usergroup membership, will SQLMail still work ?

    Is there a way to use a secure service account with SQLMail ?

    Thanks,

    Geof


  • Next message: fasttrack via SQLMonster.com: "sql server sp_addlogin from vb.net and security !!!!"

    Relevant Pages

    • Re: SQLMail and restricted service account
      ... You only need to grant the right to configure the mail ... >"To configure a mail profile for a service account, ... will SQLMail still work? ...
      (microsoft.public.sqlserver.security)
    • Re: Running Analysis Server 2000 on seperate box
      ... changing the service account sorted things. ... with 2GB ram on Windows Server 2003. ... The server has both the database and Analysis Services ... >to use Local System which is fine for local databases, ...
      (microsoft.public.sqlserver.olap)
    • Re: SPN for SSL over common name
      ... you can't register those SPNs under the SQL Server's ... service account is the MSSQL SPN. ... That SPN should be registered under ... Lastly, since the SQL Server is not being used for delegation anywhere, ...
      (microsoft.public.inetserver.iis.security)
    • Re: In SSP Admin page Search Setting link fails with access denied
      ... First I modified the permissions of the SSP service account as you said. ... administratie and service accounts (Office SharePoint Server): ... How to change the passwords for service accounts in SharePoint Server ...
      (microsoft.public.sharepoint.portalserver)
    • Re: Kerberos w/ SQL and WIN2000
      ... are not using Linked Servers then you don't need to set up an SPN AFAIK ... Win2000 will default to using kerberos to connect to the server anyway ... For my server called sqlnlb01 in domain domsql.com using a service account ...
      (microsoft.public.sqlserver.security)