?
Solved

Running SQL server with a domain account

Posted on 2010-11-30
9
Medium Priority
?
195 Views
Last Modified: 2012-05-10
I've been running MSSQL2005 on a 2003 server with the main SQL service using the main Domain administrator acount and password.

Not the best practice so I've created a new AD user account for this purpose, however how do I then assign the appropriate permissions to this new account for the service to run?

I assumed there would be a local user group on the server that is running sql that I would make the new AD user a member of but I can't see an appropriate group (there are several SQL groups but not one that works, I get error 17058)

If I run the SQL service using Local System account then it runs fine but how secure is this?

Help appreciated.
0
Comment
Question by:ITSMEPJB
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 3
9 Comments
 
LVL 18

Expert Comment

by:x-men
ID: 34238118
BOL has the list with the permission needed to run MSSQLSERVER. Just search for something like "Setting Up Windows Service Accounts "
0
 
LVL 18

Expert Comment

by:x-men
ID: 34239464
0
 

Author Comment

by:ITSMEPJB
ID: 34258975
OK, good info. Thanks.

The service that I want to start is the "SQL Server (MSSQL)" and I have an AD user account to use, where do I define this user the rights? Do I use the "local users and groups" mmc snap in to make the AD user a member of one of the sql groups shown there or is it something I have to define in the SQL server manager console?
0
 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

 
LVL 18

Expert Comment

by:x-men
ID: 34259299
local security policy
0
 
LVL 18

Expert Comment

by:x-men
ID: 34259310
administrative tools > Local security Policy

or

c:\windows\system32\gpedit.msc

or through GPO (in case of domain policy)
0
 

Author Comment

by:ITSMEPJB
ID: 34259632
The only user rights that I can see as appropriate under local security policy is "Allow logon as a service" what particular right do i need to assign for it to run the service?
0
 
LVL 18

Expert Comment

by:x-men
ID: 34265436
you add the user to the list.

for each policy, there is a "tab" explaining it.
0
 

Author Comment

by:ITSMEPJB
ID: 34265591
I've added a user to AD, looking through the local security policy of the server running the sql database I have added this user to the logon as service but the MSSQL service will not accept this user to start the service.?
0
 
LVL 18

Accepted Solution

by:
x-men earned 2000 total points
ID: 34266085
did you follow the link? there are more permissions to set either than "logon as service", have you checked NTFS permissions for example.

bototm line is: check EVERYTHING thats in
http://msdn.microsoft.com/en-us/library/ms143504.aspx#Review_NT_rights 
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you having speed problem in loading SQL Server Management Studio, try to uncheck these options in your internet browser (IE -> Internet Options / Advanced / Security):    . Check for publisher's certificate revocation    . Check for server ce…
This article explains how to reset the password of the sa account on a Microsoft SQL Server.  The steps in this article work in SQL 2005, 2008, 2008 R2, 2012, 2014 and 2016.
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question