Re: Network Service Account

Michael Epprecht [MSFT] wrote:
Hi

SQL Server 2005 BOL:
http://msdn2.microsoft.com/en-us/library/ms143504.aspx

About 25 % down the page "Microsoft recommends that you not use the Network
Service account for the SQL Server or the SQL Server Agent services. Local
User or Domain User accounts are more appropriate for these SQL Server
services."

That's one of the contradictory recommendations I had seen. I suspect
that the quoted passage from the Physical DB design document is missing
a negative somewhere. Just wondering if there was another school of
thought on this issue.

Quoting from white paper "Microsoft SQL Server 2005 Physical Database
Storage Design" by Kathy Lu and Lewis Bruck published June 2006 and
available for download at
http://www.microsoft.com/technet/prodtechnol/sql/2005/library/planning.mspx:

"By default, if SQL Server is running under the Network Service account
(as strongly recommended), this permission [SE_MANAGE_VOLUME_NAME for
Instant File Initialization] is off."

.

Relevant Pages

  • Re: How do I copy a file using xp_cmdshell
    ... and SQL Server runs under the service account. ... Also, if you use UNC, make sure that the service account have permission on the share. ... The network name cannot be found. ... The path and filename ...
    (microsoft.public.sqlserver.programming)
  • RE: Upgrade from 2005 to 2008: Invalid Credentials
    ... it seems that this issue was related to NETWORK SERVICE account for SSIS service could not be validated on DC. ... Please first go to your Services pane, double click your SQL Server Integration Services, switch to the Log On tab to check if the service account is NETWORK SERVICE account. ... Install SQL Server 2008 from the Command Prompt ... Microsoft Online Community Support ...
    (microsoft.public.sqlserver.setup)
  • Re: SPN Requirement
    ... The service account for SQL Server needs to be a domain ... account to allow Write Public Information rights but I'd ... The SQL Network Interface library could not register the Service Principal ... Name for the SQL Server service. ...
    (microsoft.public.sqlserver.security)
  • Re: Question about "Distribution clean up: distribution" Job
    ... I granted the SQL Server Service Account "Full Control" over ... the Snapshot Folder and the job has been running successfully ever since. ... Then I went into the job step and copied the command it was ...
    (microsoft.public.sqlserver.replication)
  • Re: xp_cmdshell failed to execute because current security context
    ... INFO: databasename: xp_cmdshell failed to execute because ... SQL Server running under has appropriate privilege. ... Server service account does not have all the relevant permissions not the sql ... ontario, canada ...
    (microsoft.public.sqlserver.server)