SQL Server 2005 Service Accounts Questions / Seeking Recommendations

From: Howard Hoffman (HowardH_at_community.nospam)
Date: 11/21/05 

Date: Mon, 21 Nov 2005 12:02:48 -0500

I've installed SQL Server 2005 Developer Edition on a couple of boxes.
During Setup, I selected 'Local System' and then later used SQL
Configuration Manager / Administrative Tools->Services to change the Service
accounts to a specific, non-built-in, local user.

Due to some domain policies at my shop, I'm unable to grant these local
accounts the 'log on as service' right such that the right persists across
reboots. I work around the issue by manually starting the services via
Administrative Tools -> Services after a reboot (this is quite a pain).

If I had created this local account prior to running SQL Server 2005 Setup,
would Setup have been able to permanently grant that account the 'Log On As
System' right?

Are there existing articles or white papers that discuss why MS recommends
(or requires) the Service accounts to be non-built-in accounts? For
example, I think I read somewhere that the Service Broker feature cannot be
enabled if the SQL Server service *is* running in Local System. I'm aware
of the MSDN articles here
(http://msdn2.microsoft.com/en-us/library/ms176021.aspx) and here
(http://msdn2.microsoft.com/en-us/library/ms143504.aspx).

Thanks in advance,

Howard Hoffman

Relevant Pages

  • Re: sql2000 setup fails on w2003
    ... letter to access the files for setup. ... I support the Professional Association for SQL Server ... > I have created an msdtc resource in the cluster group. ... > I have logged on to the cluster using the accounts. ...
    (microsoft.public.sqlserver.clustering)
  • RE: Installation
    ... To run Unattended SQL Server setup at Command Prompt, ... How to record an unattended installation file ...
    (microsoft.public.sqlserver.setup)
  • RE: Problems upgrading SQL MSDE for Sharepoint
    ... Please try the following steps and then run the SQL Server 2000 setup again: ... Can we install SQL Server successfully at this time? ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Newbie question on SQL connection
    ... > Let me educate you about SQL Server security. ... granting permissions to these accounts in SQL ... > maintain its own user accounts, which are separate from domain user ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Sql server 2005 clustered service group
    ... For each clustered service in the instance of SQL Server that you are ... administrator for the names of existing domain groups, ... Note that SQL Server accounts will not be removed from the groups if SQL ... I see with installing SS2005 cluster if forces me to use domain accounts ...
    (microsoft.public.sqlserver.setup)