service account permissions

if the domain account that is used as a starter account, has the below permissions, do think they are in range, or should they be more restricted?

thanks
ADMINISTER BULK OPERATIONS
ALTER ANY CONNECTION
ALTER ANY CREDENTIAL
ALTER ANY DATABASE
ALTER ANY ENDPOINT
ALTER ANY EVENT NOTIFICATION
ALTER ANY LINKED SERVER
ALTER ANY LOGIN
ALTER RESOURCES
ALTER SERVER STATE
ALTER SETTINGS
ALTER TRACE
AUTHENTICATE SERVER
CONNECT SQL
CONTROL SERVER
CREATE ANY DATABASE
CREATE DDL EVENT NOTIFICATION
CREATE ENDPOINT
CREATE TRACE EVENT NOTIFICATION
EXTERNAL ACCESS ASSEMBLY
SHUTDOWN
UNSAFE ASSEMBLY
VIEW ANY DATABASE
VIEW ANY DEFINITION
VIEW SERVER STATE

Open in new window

LVL 6
anushahannaAsked:
Who is Participating?
 
BrandonGalderisiConnect With a Mentor Commented:
For SQL 2005...

Start > Programs > MS SQL Server 2005 > Configuration Tools > SQL Server Configuration Manager

SQL Server 2005 Services
 > SQL Server (INSTANCE NAME)
 > right click properties

If you change it from there, the appropriate permissions will be set when you restart the service.


I wanted to spell it out because depending upon the OS the screens look very similar when accessing it via services.  Plus, it provides more value for the PAQ (previously asked questions).
0
 
BrandonGalderisiCommented:
If you use the SQL configuration tools to set the service account, it will set the appropriate permissions.
0
 
anushahannaAuthor Commented:
do you mean from Config manager?
serv.bmp
0
[Webinar] Improve your customer journey

A positive customer journey is important in attracting and retaining business. To improve this experience, you can use Google Maps APIs to increase checkout conversions, boost user engagement, and optimize order fulfillment. Learn how in this webinar presented by Dito.

 
BrandonGalderisiCommented:
That is how you change the service directly.  I don't have a 2000 instance installed and available at this time, but under start > programs > MS SQL Server, you should see a configuration tool.  If you set the service account through there, it should set the appropriate permissions.
0
 
anushahannaAuthor Commented:
the pic i posted is from 2005. that should work fine for 2005, right?
0
 
anushahannaAuthor Commented:
i really appreciate your help there, Brandon. Thank you.

>>appropriate permissions

when you say appropriate permissions, does it apply the permissions of the windows login that will be used as service account- how does that work?
0
 
BrandonGalderisiConnect With a Mentor Commented:
There are special windows groups that are created when you install SQL Server.  SQL Server will ensure that the appropriate user is part of the correct group so that it has the necessary permissions to run SQL Server.
0
 
anushahannaAuthor Commented:
are you referring to the group that is termed something like '...MACHINENAME$MSSQLSERVER'.

thanks
0
 
BrandonGalderisiCommented:
Yes.
0
 
anushahannaAuthor Commented:
Thanks very much, experts, for your helpful guidance.
0
All Courses

From novice to tech pro — start learning today.