Solved

service account permissions

Posted on 2010-09-13
10
251 Views
Last Modified: 2012-06-21
if the domain account that is used as a starter account, has the below permissions, do think they are in range, or should they be more restricted?

thanks
ADMINISTER BULK OPERATIONS

ALTER ANY CONNECTION

ALTER ANY CREDENTIAL

ALTER ANY DATABASE

ALTER ANY ENDPOINT

ALTER ANY EVENT NOTIFICATION

ALTER ANY LINKED SERVER

ALTER ANY LOGIN

ALTER RESOURCES

ALTER SERVER STATE

ALTER SETTINGS

ALTER TRACE

AUTHENTICATE SERVER

CONNECT SQL

CONTROL SERVER

CREATE ANY DATABASE

CREATE DDL EVENT NOTIFICATION

CREATE ENDPOINT

CREATE TRACE EVENT NOTIFICATION

EXTERNAL ACCESS ASSEMBLY

SHUTDOWN

UNSAFE ASSEMBLY

VIEW ANY DATABASE

VIEW ANY DEFINITION

VIEW SERVER STATE

Open in new window

0
Comment
Question by:anushahanna
  • 5
  • 5
10 Comments
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33664558
If you use the SQL configuration tools to set the service account, it will set the appropriate permissions.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665395
do you mean from Config manager?
serv.bmp
0
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33665459
That is how you change the service directly.  I don't have a 2000 instance installed and available at this time, but under start > programs > MS SQL Server, you should see a configuration tool.  If you set the service account through there, it should set the appropriate permissions.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665571
the pic i posted is from 2005. that should work fine for 2005, right?
0
 
LVL 39

Accepted Solution

by:
BrandonGalderisi earned 500 total points
ID: 33665669
For SQL 2005...

Start > Programs > MS SQL Server 2005 > Configuration Tools > SQL Server Configuration Manager

SQL Server 2005 Services
 > SQL Server (INSTANCE NAME)
 > right click properties

If you change it from there, the appropriate permissions will be set when you restart the service.


I wanted to spell it out because depending upon the OS the screens look very similar when accessing it via services.  Plus, it provides more value for the PAQ (previously asked questions).
0
Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

 
LVL 6

Author Comment

by:anushahanna
ID: 33665706
i really appreciate your help there, Brandon. Thank you.

>>appropriate permissions

when you say appropriate permissions, does it apply the permissions of the windows login that will be used as service account- how does that work?
0
 
LVL 39

Assisted Solution

by:BrandonGalderisi
BrandonGalderisi earned 500 total points
ID: 33665746
There are special windows groups that are created when you install SQL Server.  SQL Server will ensure that the appropriate user is part of the correct group so that it has the necessary permissions to run SQL Server.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665993
are you referring to the group that is termed something like '...MACHINENAME$MSSQLSERVER'.

thanks
0
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33666031
Yes.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33666245
Thanks very much, experts, for your helpful guidance.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Join & Write a Comment

Introduced in Microsoft SQL Server 2005, the Copy Database Wizard (http://msdn.microsoft.com/en-us/library/ms188664.aspx) is useful in copying databases and associated objects between SQL instances; therefore, it is a good migration and upgrade tool…
Load balancing is the method of dividing the total amount of work performed by one computer between two or more computers. Its aim is to get more work done in the same amount of time, ensuring that all the users get served faster.
Using examples as well as descriptions, and references to Books Online, show the documentation available for date manipulation functions and by using a select few of these functions, show how date based data can be manipulated with these functions.
Viewers will learn how to use the UPDATE and DELETE statements to change or remove existing data from their tables. Make a table: Update a specific column given a specific row using the UPDATE statement: Remove a set of values using the DELETE s…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now