Re: sql browser registry access

> Even if no one out there knows the specific keys, does anyone know if
> adding
> the sql browser account to the SQLServer2005SQLBrowser$SERVERNAME local
> group
> that is created at installation time will give access to the needed keys??

I'm pretty sure adding the account to the local SQLServer2005SQLBrowser
group will take care of it. On my installation, SQLServer2005SQLBrowser is
granted read permissions to HKLM\SOFTWARE\Microsoft\Microsoft SQL Server and
subkey permissions are inherited.

--
Happy Holidays

Dan Guzman
SQL Server MVP

"Jaime" <Jaime@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0FCA4388-40A1-4AFD-BAFE-F2FED6CD93AF@xxxxxxxxxxxxxxxx
>I appreciate the response, but this doesn't say anything about the registry
> keys sql browser needs access to in order to work. (SQL 2005)
>
> Even if no one out there knows the specific keys, does anyone know if
> adding
> the sql browser account to the SQLServer2005SQLBrowser$SERVERNAME local
> group
> that is created at installation time will give access to the needed keys??
>
> Jaime
>
> "Andy Davis" wrote:
>
>> Hi,
>> i may suggest you to read following :
>>
>> http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=24
>>
>> :-)
>> Regards
>> --
>> Andy Davis
>> Activecrypt Team
>> --------------------------------------------
>> SQL Server Encryption Software
>> http://www.activecrypt.com
>>
>>
>>
>> "Jaime" wrote:
>>
>> > I'm trying to set up the minimim permissions for the SQL Browser
>> > account.
>> > From Books Online, those are as follows:
>> >
>> > Deny access to this computer from the network
>> > Deny logon locally
>> > Deny Log on as a batch job
>> > Deny Log On Through Terminal Services
>> > Log on as a service
>> > Read and write the SQL Server registry keys related to network
>> > communication
>> > (ports and pipes)
>> >
>> > But it never specifies which registry keys those are. Does anyone know
>> > which
>> > keys SQL Browser needs access to? Or even a higher level group of keys?
>> > I
>> > don't want to give this account more access then it needs.
>> >
>> > Thanks
>> >
>> > Jaime McGeathy


.