New nt account to replace builtin admin

Posted on 2006-05-26
Medium Priority
Last Modified: 2008-03-06
If i set up a new domain account to start SQL and remove builtin/admins

The new ntdomain/sqlstartup account in Windows NT
does this need to be part of domain admins.
and the nt authority\network sevice   (anyone know what this is ?)
Question by:TRACEYMARY
1 Comment

Accepted Solution

vijay4sql earned 2000 total points
ID: 16775952
I know for sure that microsoft does not recommend that you run SQL Server with domain admin or even local admin permissions.

If you do not want the SQL Server or the SQL Server Agent startup account to be a member of the Local Administrators Group , then the startup account for the MSSQLServer service and the SQLServerAgent service (either a local Windows NT account, or a domain Windows NT account) must have these user rights:
• Act as Part of the Operating System = SeTcbPrivilege  
• Bypass Traverse Checking = SeChangeNotify  
• Lock Pages In Memory = SeLockMemory  
• Log on as a Batch Job = SeBatchLogonRight  
• Log on as a Service = SeServiceLogonRight  
• Replace a Process Level Token = SeAssignPrimaryTokenPrivilege  

All that we need to give are the above permissions (of course the full permissions on binaries and the datafiles).
Just a point here -- if SQL is running on cluster and we plan to remove builtin/admin -- do not forget to add cluster service startup account as a login under SQL.. other wise sql would fail to come online.


Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this blog post, we’ll look at how using thread_statistics can cause high memory usage.
Instead of error trapping or hard-coding for non-updateable fields when using QODBC, let VBA automatically disable them when forms open. This way, users can view but not change the data. Part 1 explained how to use schema tables to do this. Part 2 h…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Suggested Courses

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question