Re: SQL Service Account

You can create a normal domain user account and use this account as a SQL Server account if you change your SQL Server' s service account using SQL Server Configuration Manager (here I assume you use SQL Server 2005).

If you go this way, SQL Server will join the service account you specified to the built-in Windows local groups which has least necessary rights to make SQL Server work properly. There are built-in local Windows groups that are created when you were installing SQL Server and they have all necessary rights to make things work.

The domain user account (if there is no a Windows group which this mentioned user account is a member has rights to write\read) does not have access to read\write to the mentioned backup folder (which probably will not have by default as it's going to be least priviliged account) you should give this account necessary rights to backup to that folder.

However, it does not have to be a member of the Local Administrators group or something else...

If there are any specific setting or something regarding to your SQL Server configuration, you should take them into consideration.

--
Ekrem Önsoy



"Vishals_Patel" <Vishals_Patel@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:BF6ACE53-3753-42A2-859B-CDB258DB15A7@xxxxxxxxxxxxxxxx
Hi,

I am planning to change SQL service account from domain admininstrator
account to domian account with least previledges. I am not sure if i have to
change security on data and back up folder on local drive.

It will be great if i can get steps to change service account smoothly
because my server is connected to internet and lots of clients is connected,
so dont want to get in to trouble.

Thanks for your response in advance.

.

Relevant Pages

  • Re: 2005 Enterprise sp 2 install fails - 11009
    ... Q...Was your SQL Server service account a domain administrator account? ...
    (microsoft.public.sqlserver.setup)
  • Re: SQL windows account
    ... > Can the account to run SQL server belong to USER group or ... >>SQL Service account absoloutely does NOT have ... >>Jasper Smith (SQL Server MVP) ... >>> I happened to be a box and DB admin and i have a local ...
    (microsoft.public.sqlserver.security)
  • Re: Error 15401 using sp_grantlogin (not addressed by current KB articles)
    ... Restarting Windows 2000 resolved the problem for this particular account, ... confused when it sees a duplicate SID. ... > One way to get SQL Server to agree with the renamed NT ... > Preview (to ensure the script was created), ...
    (microsoft.public.sqlserver.security)
  • Re: SharePoint V3 Install Error
    ... But it our case it had to do with Group Policies that forbid the account of ... WSS FAQ:www.wssv3faq.com/wss.collutions.com ... Event Source: WindowsSharePointServices3Search ... whatever you are installing WSS as sufficient rights to the SQL Server ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Backup Issue! Interesting or weird - you decide!
    ... The service account is the account that the SQL Server service runs under. ... Dump is only available on version after SQL 6.5 for compatibility, ...
    (microsoft.public.sqlserver.programming)