Service accounts

Posted on 2005-04-22
Last Modified: 2012-05-05
I would like some advice on how to set up the accounts under which SQL Server 2000 and SS Agent run.  I am responsible for several servers.  I do not want either the SS service or the SSA service to run under the security context of the Local System Account.  All the servers are part of the same domain.

Should I establish domain accounts under which to run the services?  What about the same account for SS and for SS Agent?  Or to go to the next step, how about one account for all the servers and services?

As you may be able to infer from my questions, these are questions the network guy is asking me, and I just don't know the answers.

In your opinion, what's the best way to proceed?

Question by:guillotj
    1 Comment
    LVL 38

    Accepted Solution

    We do it as one Domain User account for all services on all servers. The user account does not have elevated privleges on the network (no Admin, power user, etc) but is in the Local Administrators group on each server.

    If the userid needs access to network recources it is added to the proper group and/or given rights to the resource. The userid has an e-mail account.

    We change the password every sixty days -- but do not expire the password.  When you change the password, you need to stop all services using the account, change the password on the domain, then change the password on all the services, then fire them up.

    That's my $0.02 :)

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Suggested Solutions

    Having an SQL database can be a big investment for a small company. Hardware, setup and of course, the price of software all add up to a big bill that some companies may not be able to absorb.  Luckily, there is a free version SQL Express, but does …
    Slowly Changing Dimension Transformation component in data task flow is very useful for us to manage and control how data changes in SSIS.
    Using examples as well as descriptions, and references to Books Online, show the documentation available for date manipulation functions and by using a select few of these functions, show how date based data can be manipulated with these functions.
    Via a live example, show how to shrink a transaction log file down to a reasonable size.

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now