Re: SQL 2K Install - Local User for Services does not work...

Hi

This is because your service runs under Local System Account (Administrators
Group)
Actually you can create a domain account with less privelidges and set up
your service to be ran under

Or perhaps you want to explain what is the purpose of the changing account



"jbiros" <jbiros@xxxxxxxxxx> wrote in message
news:1150397880.726355.80550@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
A while back I tried to use Enterprise Manager to change our services
to run as a lesser privelidged local non-admin account instead of our
high priviledged domain account. According to many websites, using
this method will set all of the permissions correctly for the new
account to run SQL Server correctly. This has never worked for me.

Now, I am installing SQL2K on a new machine (Win2K). I've created the
local account that I want to run the services as. When I get to the
setup screen that asks about the services, I enter the service account
name, password, and MACHINENAME as the domain. The setup process
continues until completion without error. The problem is, I can't get
the SQL Services to start. I know it is the service account that is
causing the problem, because if I add it to the BUILTIN\Administrators
group on the machine, the SQL Services start fine.

I am stumped. Why doesn't EM correctly set the permissions for the
account? Is this a known problem? Has anyone had this issue before?
Does anyone have any hints?

Thank You,

Jeremy



.

Relevant Pages

  • Re: "Edit Users..." Menu Item Disabled in Telephony Management Sna
    ... On the member server, make sure the domain account you are using to log on ... Running "tapicfg show" revealed that I had no Active Directory TAPI ...
    (microsoft.public.win32.programmer.tapi)
  • Re: Domain could not be contacted problem
    ... > can either make the process run under a domain account, ... > To impersonate a domain account, you generally do this by enabling ... > impersonating the authenticated user in IIS. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: Domain could not be contacted problem
    ... > can either make the process run under a domain account, ... > To impersonate a domain account, you generally do this by enabling ... > impersonating the authenticated user in IIS. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Kerberos Problem with App Pool running as Domain Account
    ... account, perhaps IIS itself has to as well (instead of the IUSR_IISSERVER ... An error occurred during logon ... Caller User Name: IISSERVER$ ... had to change this to use a domain account because our DR server needed ...
    (microsoft.public.inetserver.iis.security)
  • Re: Cannot find a users email address in Exchange 5.5 SP4
    ... I just dug out an old Exchange 5.5 book that I never had the need to open ... >>Google posts suggested using a Custom Recipient to forward inbound domain ... >>until I first added a domain account for the user. ... > You do not need to setup a domain account to accomplish this. ...
    (microsoft.public.exchange.admin)