Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Should SQL2008 server service account be a local admin of the server

Posted on 2011-10-26
Medium Priority
Last Modified: 2012-05-12
Hello there,

Please advise if sql server service account should be a local admin of the server (w2k8 r2)?

Thanks and Regards
Question by:goprasad
  • 2

Expert Comment

ID: 37036284
It *can* be but it's not recommended as it provides extra access that really isn't needed, yet most companies I know use an admin account for it.  

This link shows you what membership roles you need.  

Do note almost every security best practice paper will tell you to use a separate account for the sql agent service and one for the sql server service, but up to now, I haven't seen that used anywhere.  Security really is based on how sensitive the data is and your environment.

Author Comment

ID: 37036332
the sql server service account that we use for a particular application is also member of local administrator.
I am thinking of removing it from local admin group, I wasn;t sure what impact it may have?

Accepted Solution

MrAli earned 2000 total points
ID: 37039136
Make sure you give it the minimum required rights stated in the linked above document, if it does not, SQL Server will not be able to perform it's tasks.  You'll get various errors and different sympthoms based on the rights you do give it.  For example, if SQL Server cannot write to the folder/file that the master or system DBs reside on, it'll stop operating.  If it can't write to the drives that the user database is on, that DB will act abnormally or stop working all together based on the usage scenario.  If the service account doesn't have rights to instant file init., DB growth operations will take a long time, etc. etc.

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

#Citrix #Internet Explorer #Enterprise Mode #IE 11 #IE 8
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

572 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question