?
Solved

service account permissions

Posted on 2010-09-13
10
Medium Priority
?
257 Views
Last Modified: 2012-06-21
if the domain account that is used as a starter account, has the below permissions, do think they are in range, or should they be more restricted?

thanks
ADMINISTER BULK OPERATIONS
ALTER ANY CONNECTION
ALTER ANY CREDENTIAL
ALTER ANY DATABASE
ALTER ANY ENDPOINT
ALTER ANY EVENT NOTIFICATION
ALTER ANY LINKED SERVER
ALTER ANY LOGIN
ALTER RESOURCES
ALTER SERVER STATE
ALTER SETTINGS
ALTER TRACE
AUTHENTICATE SERVER
CONNECT SQL
CONTROL SERVER
CREATE ANY DATABASE
CREATE DDL EVENT NOTIFICATION
CREATE ENDPOINT
CREATE TRACE EVENT NOTIFICATION
EXTERNAL ACCESS ASSEMBLY
SHUTDOWN
UNSAFE ASSEMBLY
VIEW ANY DATABASE
VIEW ANY DEFINITION
VIEW SERVER STATE

Open in new window

0
Comment
Question by:anushahanna
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
10 Comments
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33664558
If you use the SQL configuration tools to set the service account, it will set the appropriate permissions.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665395
do you mean from Config manager?
serv.bmp
0
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33665459
That is how you change the service directly.  I don't have a 2000 instance installed and available at this time, but under start > programs > MS SQL Server, you should see a configuration tool.  If you set the service account through there, it should set the appropriate permissions.
0
Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

 
LVL 6

Author Comment

by:anushahanna
ID: 33665571
the pic i posted is from 2005. that should work fine for 2005, right?
0
 
LVL 39

Accepted Solution

by:
BrandonGalderisi earned 2000 total points
ID: 33665669
For SQL 2005...

Start > Programs > MS SQL Server 2005 > Configuration Tools > SQL Server Configuration Manager

SQL Server 2005 Services
 > SQL Server (INSTANCE NAME)
 > right click properties

If you change it from there, the appropriate permissions will be set when you restart the service.


I wanted to spell it out because depending upon the OS the screens look very similar when accessing it via services.  Plus, it provides more value for the PAQ (previously asked questions).
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665706
i really appreciate your help there, Brandon. Thank you.

>>appropriate permissions

when you say appropriate permissions, does it apply the permissions of the windows login that will be used as service account- how does that work?
0
 
LVL 39

Assisted Solution

by:BrandonGalderisi
BrandonGalderisi earned 2000 total points
ID: 33665746
There are special windows groups that are created when you install SQL Server.  SQL Server will ensure that the appropriate user is part of the correct group so that it has the necessary permissions to run SQL Server.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665993
are you referring to the group that is termed something like '...MACHINENAME$MSSQLSERVER'.

thanks
0
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33666031
Yes.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33666245
Thanks very much, experts, for your helpful guidance.
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Load balancing is the method of dividing the total amount of work performed by one computer between two or more computers. Its aim is to get more work done in the same amount of time, ensuring that all the users get served faster.
What if you have to shut down the entire Citrix infrastructure for hardware maintenance, software upgrades or "the unknown"? I developed this plan for "the unknown" and hope that it helps you as well. This article explains how to properly shut down …
Familiarize people with the process of utilizing SQL Server functions from within Microsoft Access. Microsoft Access is a very powerful client/server development tool. One of the SQL Server objects that you can interact with from within Microsoft Ac…
Familiarize people with the process of retrieving data from SQL Server using an Access pass-thru query. Microsoft Access is a very powerful client/server development tool. One of the ways that you can retrieve data from a SQL Server is by using a pa…
Suggested Courses

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question