Re: Network Service Account

Hi

SQL Server 2005 BOL:
http://msdn2.microsoft.com/en-us/library/ms143504.aspx

About 25 % down the page "Microsoft recommends that you not use the Network
Service account for the SQL Server or the SQL Server Agent services. Local
User or Domain User accounts are more appropriate for these SQL Server
services."

Domain account with the minimum permissions is more appropriate.

Regards
--
Mike

This posting is provided "AS IS" with no warranties, and confers no rights.


"Bob Lanteigne" <bob.lanteigne@xxxxxxxxx> wrote in message
news:1151616728.524815.176560@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Quoting from white paper "Microsoft SQL Server 2005 Physical Database
Storage Design" by Kathy Lu and Lewis Bruck published June 2006 and
available for download at
http://www.microsoft.com/technet/prodtechnol/sql/2005/library/planning.mspx:

"By default, if SQL Server is running under the Network Service account
(as strongly recommended), this permission [SE_MANAGE_VOLUME_NAME for
Instant File Initialization] is off."

Anyone have a reference to this "strong recommendation" for using the
Network Service account for SQL Server? It seems to contradict other
information available from Microsoft.

Bob Lanteigne



.

Relevant Pages

  • RE: Upgrade from 2005 to 2008: Invalid Credentials
    ... it seems that this issue was related to NETWORK SERVICE account for SSIS service could not be validated on DC. ... Please first go to your Services pane, double click your SQL Server Integration Services, switch to the Log On tab to check if the service account is NETWORK SERVICE account. ... Install SQL Server 2008 from the Command Prompt ... Microsoft Online Community Support ...
    (microsoft.public.sqlserver.setup)
  • Re: Login failed for user: domainservername$
    ... That is the ServerName\Network Service account being seen from the other computer (then SQL Server box), because your ASPNET app runs under the Network Service account of the IIS server. ...
    (microsoft.public.dotnet.general)
  • Re: SPN Requirement
    ... The service account for SQL Server needs to be a domain ... account to allow Write Public Information rights but I'd ... The SQL Network Interface library could not register the Service Principal ... Name for the SQL Server service. ...
    (microsoft.public.sqlserver.security)
  • Re: Question about "Distribution clean up: distribution" Job
    ... I granted the SQL Server Service Account "Full Control" over ... the Snapshot Folder and the job has been running successfully ever since. ... Then I went into the job step and copied the command it was ...
    (microsoft.public.sqlserver.replication)
  • Re: xp_cmdshell failed to execute because current security context
    ... INFO: databasename: xp_cmdshell failed to execute because ... SQL Server running under has appropriate privilege. ... Server service account does not have all the relevant permissions not the sql ... ontario, canada ...
    (microsoft.public.sqlserver.server)