NTFS Permissions and SQL server

Posted on 2008-11-16
Last Modified: 2012-06-27
I have set upa  new SQL server with individual user accounts for each service.
I also set up seperate folders for the data, logs, temp files  etc.

I am getting permission errors when I remove the LocalMachine/Users group from the ACL on the folders.  I want to lock them down so that only administrators and the sql server service users can access the files.   Does anyone have a list of these?

Question by:skykingjwc
    1 Comment
    LVL 6

    Accepted Solution

    You must be very careful when removing default Microsoft permissions because of unexpected results.  The defaults for 2005 and 2008 provide the necessary permissions for all SQL Server functionality to work as intended.  Problems from changing those permissions may not be immediately evident until a specific functionality is accessed. states "During installation, SQL Server will set appropriate ACLs on registry keys and files if it detects NTFS. These permissions should not be changed."

    Checkout for Microsoft's defined list of permissions.


    Featured Post

    Shouldn't all users have the same email signature?

    You wouldn't let your users design their own business cards, would you? So, why do you let them design their own email signatures? Think of the damage they could be doing to your brand reputation! Choose the easy way to manage set up and add email signatures for all users.

    Join & Write a Comment

    Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
    Hi all, It is important and often overlooked to understand “Database properties”. Often we see questions about "log files" or "where is the database" and one of the easiest ways to get general information about your database is to use “Database p…
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
    This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…

    732 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now