Solved

service account permissions

Posted on 2010-09-13
10
255 Views
Last Modified: 2012-06-21
if the domain account that is used as a starter account, has the below permissions, do think they are in range, or should they be more restricted?

thanks
ADMINISTER BULK OPERATIONS
ALTER ANY CONNECTION
ALTER ANY CREDENTIAL
ALTER ANY DATABASE
ALTER ANY ENDPOINT
ALTER ANY EVENT NOTIFICATION
ALTER ANY LINKED SERVER
ALTER ANY LOGIN
ALTER RESOURCES
ALTER SERVER STATE
ALTER SETTINGS
ALTER TRACE
AUTHENTICATE SERVER
CONNECT SQL
CONTROL SERVER
CREATE ANY DATABASE
CREATE DDL EVENT NOTIFICATION
CREATE ENDPOINT
CREATE TRACE EVENT NOTIFICATION
EXTERNAL ACCESS ASSEMBLY
SHUTDOWN
UNSAFE ASSEMBLY
VIEW ANY DATABASE
VIEW ANY DEFINITION
VIEW SERVER STATE

Open in new window

0
Comment
Question by:anushahanna
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
10 Comments
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33664558
If you use the SQL configuration tools to set the service account, it will set the appropriate permissions.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665395
do you mean from Config manager?
serv.bmp
0
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33665459
That is how you change the service directly.  I don't have a 2000 instance installed and available at this time, but under start > programs > MS SQL Server, you should see a configuration tool.  If you set the service account through there, it should set the appropriate permissions.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 6

Author Comment

by:anushahanna
ID: 33665571
the pic i posted is from 2005. that should work fine for 2005, right?
0
 
LVL 39

Accepted Solution

by:
BrandonGalderisi earned 500 total points
ID: 33665669
For SQL 2005...

Start > Programs > MS SQL Server 2005 > Configuration Tools > SQL Server Configuration Manager

SQL Server 2005 Services
 > SQL Server (INSTANCE NAME)
 > right click properties

If you change it from there, the appropriate permissions will be set when you restart the service.


I wanted to spell it out because depending upon the OS the screens look very similar when accessing it via services.  Plus, it provides more value for the PAQ (previously asked questions).
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665706
i really appreciate your help there, Brandon. Thank you.

>>appropriate permissions

when you say appropriate permissions, does it apply the permissions of the windows login that will be used as service account- how does that work?
0
 
LVL 39

Assisted Solution

by:BrandonGalderisi
BrandonGalderisi earned 500 total points
ID: 33665746
There are special windows groups that are created when you install SQL Server.  SQL Server will ensure that the appropriate user is part of the correct group so that it has the necessary permissions to run SQL Server.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33665993
are you referring to the group that is termed something like '...MACHINENAME$MSSQLSERVER'.

thanks
0
 
LVL 39

Expert Comment

by:BrandonGalderisi
ID: 33666031
Yes.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33666245
Thanks very much, experts, for your helpful guidance.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Nowadays, some of developer are too much worried about data. Who is using data, who is updating it etc. etc. Because, data is more costlier in term of money and information. So security of data is focusing concern in days. Lets' understand the Au…
Load balancing is the method of dividing the total amount of work performed by one computer between two or more computers. Its aim is to get more work done in the same amount of time, ensuring that all the users get served faster.
Via a live example, show how to extract insert data into a SQL Server database table using the Import/Export option and Bulk Insert.
Viewers will learn how to use the SELECT statement in SQL and will be exposed to the many uses the SELECT statement has.

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question