changing service account to a domain one

What is the procedure to change the service account, after the fact that the system has already been installed and being used? Is there a way to do it without reinstalling the system?

Thanks
LVL 6
anushahannaAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Encrypted1024Connect With a Mentor Commented:
Services.msc. Open services in the management console and change the logon account for the SQL services that have your previous account listed. Some use local systemaccount you will not have to change those. Restart SQL services.
0
 
anushahannaAuthor Commented:
Yes, I use the local system account but it does not have privileges outside the box.

So for example, if I need SQL Server to have access to a network drive, then I need to have a domain account that has access as the service account.
because the windows login that is logged on into the client box has access to the network drive, but apparently SQL does not access because it is using the local system account which does not have access to the network drive and hence the need to change the local service account.

thanks
0
 
Encrypted1024Connect With a Mentor Commented:
I know. What I meant was  not all SQL accounts need to run as your domain account.

Domain Service Account:
- SQL Server
- SQL Server Agent
- SQL Server Integration Services
- SQL Server Reporting

Loacl System
- SQL Active Directory Helper
- SQL Server Vss Writer

Local Service
- SQL Full-Text Filter
- SQL Server Browser
0
Learn to develop an Android App

Want to increase your earning potential in 2018? Pad your resume with app building experience. Learn how with this hands-on course.

 
anushahannaAuthor Commented:
what you have given is what is recommended by you, right?

Do I check the properties of each of what you have listed to see which account is the owner of the service?

thanks
0
 
Encrypted1024Commented:
No, what I have given is the defaults. When you install SQL with a service account thats how MS sets it up. Yes, you just go into services and change the logon user account.
0
 
Raja Jegan RConnect With a Mentor SQL Server DBA & ArchitectCommented:
>> What is the procedure to change the service account, after the fact that the system has already been installed and being used? Is there a way to do it without reinstalling the system?

Yes, you can do it without reinstalling the system since they are just services and can be reconfigured without any issues.
And Encrypted1024 told you how to change it in services.msc
For SQL Server 2008, you need to take additional measures as given below:
http://msdn.microsoft.com/en-us/library/ms345578.aspx
0
 
Raja Jegan RConnect With a Mentor SQL Server DBA & ArchitectCommented:
And its recommended to change all SQL Server related services via SQL Server Configuration Manager instead of services.msc as there are few considerations left behind that.

"Always use SQL Server tools such as SQL Server Configuration Manager to change the account used by the SQL Server or SQL Server Agent services, or to change the password for the account. In addition to changing the account name, SQL Server Configuration Manager performs additional configuration such as setting permissions in the Windows Registry so that the new account can read the SQL Server settings. Other tools such as the Windows Services Control Manager can change the account name but do not change associated settings. If the service cannot access the SQL Server portion of the registry, the service may not start properly."

Excerpt from

http://msdn.microsoft.com/en-us/library/ms143504.aspx
0
 
Raja Jegan RConnect With a Mentor SQL Server DBA & ArchitectCommented:
>> what you have given is what is recommended by you, right?

Since you need your SQL Server to access domain resources, just change the startup account of SQL Server and SQL Server Agent to domain account which should suffice for your requirement.
0
 
Encrypted1024Commented:
That is basically what I was trying to say. You don't need to change all of them.
0
 
Raja Jegan RConnect With a Mentor SQL Server DBA & ArchitectCommented:
>> That is basically what I was trying to say. You don't need to change all of them.

Yes, agreed but the one I highlighted here is that Don't do those changes via services.msc instead do it in SQL Server Configuration Manager for SQL Server related services.
0
 
Encrypted1024Commented:
Ah, good info. I like that method better. Thanks rrjegan17 for the improved process.
0
 
Raja Jegan RSQL Server DBA & ArchitectCommented:
Welcome Encrypted1024.
0
 
anushahannaAuthor Commented:
Right now the Log on is through the Built-in Local account. when I tried to change it to a domain account, I get the following errors. I tried %, then names, then domain userIDs, but the same error message in all. Any thoughts what I may be missing?
LocalServiceAccount.bmp
0
 
Encrypted1024Connect With a Mentor Commented:
Have you created a domain service account in ADUC? Also, when selecting the account, did you choose to select it from the Directory or the Local Computer. I can't see because the error is covering that part of the box.
0
 
anushahannaAuthor Commented:
Encrypted1024, thanks. that clue helped me out. i was not looking in the right directory.

If I change the log on account to the domain one, do I need to stop the service first, then change it, then restart it?
0
 
Encrypted1024Connect With a Mentor Commented:
It prompts you to restart the service as part of the process.
0
 
anushahannaAuthor Commented:
Thanks very much.
0
All Courses

From novice to tech pro — start learning today.