Re: Specifying a logon account for SQL Server 2005 services

Ben Nevarez (BenNevarez@xxxxxxxxxxxxxxxxxxxxxxxxx) writes:
As I mentioned using a Windows domain account with no permissions is the
recommended way to define a service account, the SQL Server setup
program will assign this account ALL the required permissions to do its
job. Perhaps the setup program does not give the 'Lock pages in memory'
permission because AWE is not configured during the software
installation and instead, it is configured only for very specific server
and memory configurations.

Thanks to Ben's post, I found some interesting topics in Books Online:

ms-help://MS.SQLCC.v9/MS.SQLSVR.v9.en/instsql9/html/cf96155f-30a8-48b7-8d6b-24ce90dafdc7.htm#sa_with_least_privileges
ms-help://MS.SQLCC.v9/MS.SQLSVR.v9.en/instsql9/html/309b9dac-0b3a-4617-85ef-c4519ce9d014.htm

The second topic of these details which permissions the service account
is granted.



--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx

Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
.

Relevant Pages

  • Re: Error 22039 trying to add SQL 2K to AD
    ... "permissions that matter but rather the permissions of the SQL Server ... What do I lose by not having SQL server registered with AD? ... > of the SQL Server service account. ...
    (microsoft.public.sqlserver.setup)
  • Re: xp_cmdshell right for non sysadmin
    ... You can get the error when the SQL Server service account ... does not have the necessary permissions to change security ...
    (microsoft.public.sqlserver.server)
  • Re: xp_cmdshell failed to execute because current security context
    ... The permissions needed are outlined in the KB that Uri posted. ... When you install SQL Server, you get a bunch of groups, one for each service for that instance. ... So you need to make sure that your service account is a member of this group. ... > ontario, canada ...
    (microsoft.public.sqlserver.server)
  • ADP, Application Role, and objects
    ... The above link is to an atricle on how to implement SQL Server Application ... After you connect with your ADP, fire a bit of code to set the ... third party tools to view the data on the same database. ... Scenario 1 - If I explicitly grant permissions on that object to the user ...
    (microsoft.public.access.adp.sqlserver)
  • Re: field level security question
    ... Vyas, MVP ... listBox control that gets data from a query of the sql server table. ... > recent change in requirement) I see the option to limit permissions right ... > utility opens except their is just no data. ...
    (microsoft.public.sqlserver.security)
Quantcast