Re: SQL Services account question...

Yes Russell, thanks.

--
Ekrem Önsoy



"Russell Fields" <russellfields@xxxxxxxxxx> wrote in message news:eJbamNRaIHA.1184@xxxxxxxxxxxxxxxxxxxxxxx
Joe,

The best thing is to do is to run your SQL Server under a domain account, not a local account.

Or, to quote Ekrem, "using a domain account as a SQL Server service account is a recommended way." (Actually, Ekrem probably meant "the recommended way.")

RLF


"Joe" <Joe@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:130C7954-0197-4711-883C-D9A73A2733F3@xxxxxxxxxxxxxxxx
Thank you for restating the obvious.

My real question is how should I best address this?

"Ekrem Önsoy" wrote:

A SQL Server server which is part of a domain and its service is not a
domain account. Why not? Because using a domain account as a SQL Server
service account is a recommended way.

My guess is, you get the error because SQL Server service can't communicate
with your AD server as it's a local service.

--
Ekrem Önsoy



"Joe" <Joe@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D75D7153-C26E-43A3-96BB-59C533F4031A@xxxxxxxxxxxxxxxx
> OK, here's my problem.
>
> I have a SQL 2005 Server that is part of a domain. The SQL services > start
> with a
> local account and not a domain account. The issue I am seeing is that
> when
> I go
> to backup a database that is owned by a Domain account the querying of > AD
> for the
> account information fails. Error below:
>
> [298] SQLServer Error: 15404, Could not obtain information about > Windows
> NT
> group/user
>
> Then in the Security event log I get an error at the same time that
> states:
>
> An error occurred during logon
> Source: Security Event ID: 537
>
> So the question is, how can I get this to work correctly? Should I > just
> change the owner of the database?
>
> Any thoughts would be appreciated.




.

Relevant Pages

  • Re: Running SQL Server Service as Domain User? - Security Concerns?
    ... make your domain account a member of the local administrators group. ... instructions on what rights on the database server the SQL Server and SQL ... > domain user called "sqlserveruser": ... the user the SQL Server service runs as has to have ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Services account question...
    ... Or, to quote Ekrem, "using a domain account as a SQL Server service account ...
    (microsoft.public.sqlserver.security)
  • Re: Unable to set SQL proxy for xp_cmdshell
    ... You should be able to get the SID using SUSER_SID for any domain account. ... One thing you might check is to make sure the SQL Server service account has ...
    (microsoft.public.sqlserver.security)
  • Re: AUDITORS !!!! AAAAAARRRRGHH
    ... Generally speaking you use a domain account when you need the SQL Server service to be able to interact with other services on the network. ...
    (microsoft.public.sqlserver.setup)
  • Re: SQL 2000 memory in W2K3
    ... it only grabbed 4 GB of ram ... using an account which has administrative rights for SQL Server is ... It would be enough to add a group that your SQL Server service is a member ... Ekrem Önsoy ...
    (microsoft.public.sqlserver.setup)