Re: SQL2005 non-administrator Service Account
- From: "Walter Horowitz" <walter@xxxxxxxxxxxx>
- Date: Wed, 30 Jul 2008 15:48:43 -0400
I run an SQL Server 2005 with a service account that is not a member of the
Administrators group.
It stopped working recently.
I audited file access failures for everyone in the documents and settings
and Program Files\Micorosft SQL Server directories and found that there were
indeed failures.
There are files that the service account needs to access in the CRYPTO area
and in the SQL area that were no longer accessable to that service account.
Once I found them and gave the account permissions, my server started to
work again
Perhaps this could be your problem?
Walter Horowitz
Mardovar Networking LLC
"SQLDudette" <SQLDudette@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B329BD41-8E93-4C83-A9DC-A1CD6424FAED@xxxxxxxxxxxxxxxx
The results of the "select @@servername" query are when sql server
services
are running under an administrator account. However, when I remove that
account from the administrators group, that's when the service won't start
up.
The problem is that the default sql server groups (under Manage > Local
Users and Groups ) still are called BobNEW (for example -
SQLSERVER2005MSFTEUser$BobNew) and I'm wondering if this could be why the
services won't start when the ID they are running under is removed from
administrators.
Is that a bit more clear?
"Rick Byham, (MSFT)" wrote:
You may have this figured out by now, but some observations:
Your first message says the SQL Server Service won't start, but the
second
message has the results of queries, so it must have started.
Your second message says the queries return bob as the name of the
server.
Since you say "we renamed BOBnew to BOB" you sound like you don't have a
problem.
Do you only have a problem with the name in Registered Servers? Drop the
server registration and re-register it.
I probably don't understand something. If you still have a problem,
please
clarify.
--
Rick Byham (MSFT), SQL Server Books Online
This posting is provided "AS IS" with no warranties, and confers no
rights.
"SQLDudette" <SQLDudette@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:49784645-A3F4-4FA7-B898-7A2433B0A155@xxxxxxxxxxxxxxxx
Also, i have run both of these and they both give the results "bob"
SELECT @@SERVERNAME
SELECT SERVERPROPERTY('MachineName'), SERVERPROPERTY ('InstanceName')
When I right click on the server in Managment Studio, and hit register,
it
also has bob as the server name.
Any assistance would be appreciated!!
"SQLDudette" wrote:
On server BOB, the SQL Services are running under an ID that by
default
was
added to the SQL server groups
SQLServer2005MSFTEUser$-ServerName-$MSSQLSERVER etc. However, the ID
is
also
under the administrators group and I would like to remove it from
there.
I
used a test 2005 box to test this, however, when I removed the id from
the
administrators, the SQL Server Service would not start up. We did
however
change the name of this box as it was a replacement for an existing
server,
the initial name was BOBnew because it was replacing a server named
BOB,
then
when we shut down BOB, we renamed BOBnew to BOB. In the SQL server
group,
the
-ServerName- is still BOBnew - it didn't change when we changed the
name
of
the box.
Could this have something to do with the SQL service not starting up?
Thanks,
Karime
.
- Prev by Date: Re: MS08-040 - SQL2k5 SP1
- Next by Date: Re: MS08-040 - SQL2k5 SP1
- Previous by thread: Re: MS08-040 - SQL2k5 SP1
- Next by thread: Re: Security Audit
- Index(es):
Relevant Pages
|
