Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

service account permissions

Posted on 2010-09-13
10
254 Views
Last Modified: 2012-06-21
if the domain account that is used as a starter account, has the below permissions, do think they are in range, or should they be more restricted?

thanks
ADMINISTER BULK OPERATIONS
ALTER ANY CONNECTION
ALTER ANY CREDENTIAL
ALTER ANY DATABASE
ALTER ANY ENDPOINT
ALTER ANY EVENT NOTIFICATION
ALTER ANY LINKED SERVER
ALTER ANY LOGIN
ALTER RESOURCES
ALTER SERVER STATE
ALTER SETTINGS
ALTER TRACE
AUTHENTICATE SERVER
CONNECT SQL
CONTROL SERVER
CREATE ANY DATABASE
CREATE DDL EVENT NOTIFICATION
CREATE ENDPOINT
CREATE TRACE EVENT NOTIFICATION
EXTERNAL ACCESS ASSEMBLY
SHUTDOWN
UNSAFE ASSEMBLY
VIEW ANY DATABASE
VIEW ANY DEFINITION
VIEW SERVER STATE

Open in new window

0
Comment
Question by:anushahanna
  • 5
  • 5
10 Comments
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33664558
If you use the SQL configuration tools to set the service account, it will set the appropriate permissions.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665395
do you mean from Config manager?
serv.bmp
0
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33665459
That is how you change the service directly.  I don't have a 2000 instance installed and available at this time, but under start > programs > MS SQL Server, you should see a configuration tool.  If you set the service account through there, it should set the appropriate permissions.
0
Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

 
LVL 6

Author Comment

by:anushahanna
ID: 33665571
the pic i posted is from 2005. that should work fine for 2005, right?
0
 
LVL 39

Accepted Solution

by:
BrandonGalderisi earned 500 total points
ID: 33665669
For SQL 2005...

Start > Programs > MS SQL Server 2005 > Configuration Tools > SQL Server Configuration Manager

SQL Server 2005 Services
 > SQL Server (INSTANCE NAME)
 > right click properties

If you change it from there, the appropriate permissions will be set when you restart the service.


I wanted to spell it out because depending upon the OS the screens look very similar when accessing it via services.  Plus, it provides more value for the PAQ (previously asked questions).
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665706
i really appreciate your help there, Brandon. Thank you.

>>appropriate permissions

when you say appropriate permissions, does it apply the permissions of the windows login that will be used as service account- how does that work?
0
 
LVL 39

Assisted Solution

by:BrandonGalderisi
BrandonGalderisi earned 500 total points
ID: 33665746
There are special windows groups that are created when you install SQL Server.  SQL Server will ensure that the appropriate user is part of the correct group so that it has the necessary permissions to run SQL Server.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665993
are you referring to the group that is termed something like '...MACHINENAME$MSSQLSERVER'.

thanks
0
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33666031
Yes.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33666245
Thanks very much, experts, for your helpful guidance.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you hear the word proxy, you may become apprehensive. This article will help you to understand Proxy and when it is useful. Let's talk Proxy for SQL Server. (Not in terms of Internet access.) Typically, you'll run into this type of problem w…
Slowly Changing Dimension Transformation component in data task flow is very useful for us to manage and control how data changes in SSIS.
Via a live example, show how to extract information from SQL Server on Database, Connection and Server properties
Viewers will learn how to use the UPDATE and DELETE statements to change or remove existing data from their tables. Make a table: Update a specific column given a specific row using the UPDATE statement: Remove a set of values using the DELETE s…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question