Solved

Where do I create SQL Server Service Accounts?

Posted on 2009-05-17
5
412 Views
Last Modified: 2012-05-07
Hi

When setting up an account for each SQL Server Service are these created in the - SBS Users  - or - Users - part of Active Directory?

Does it matter?

Regards
William

AD.bmp
0
Comment
Question by:Whisky-Will
  • 2
  • 2
5 Comments
 
LVL 3

Assisted Solution

by:ddanonimity
ddanonimity earned 50 total points
ID: 24406464
I would say it doesn't matter  as long as you make sure they have the correct permissions for the account to run the required service
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24406527
I've see a lot of organizations create an OU called "service accounts"
That way if you are ever making modifications it is really easy to exclude those accounts in that OU.
You could also add something to the description maybe like "serviceAccount"
Thanks
Mike
0
 

Author Comment

by:Whisky-Will
ID: 24406600
Hi
I have found some more information.
SBS USers: Default organisational unit for user accounts created with the Add New User Account wizard
Users: Default container for upgraded user accounts
As I created these accounts without using the Add New User wizard it looks like I should have created them in Users. Now when I try and move them I get a warning that If I move them things might not work because of the way group policies are applied.
Since being advised on this site to create separate accounts for each SQL service I just seem to be digging a bigger and bigger hole that I cant get out of.
At what level in my diagram should I create the new OU "Service Accounts" and can I ignore the error message and move the accounts there?
Regards
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 450 total points
ID: 24406612
We have our service accounts at the root so right click on the domain and select new OU
yes you can ignore the group policy warning, you shouldn't have issues there.
Thanks
Mike
0
 

Author Closing Comment

by:Whisky-Will
ID: 31582378
Thanks for your help guy's
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to reset the password of the sa account on a Microsoft SQL Server.  The steps in this article work in SQL 2005, 2008, 2008 R2, 2012, 2014 and 2016.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question