We help IT Professionals succeed at work.

service account and ability of scheduled packages

25112
25112 asked
on
Medium Priority
306 Views
Last Modified: 2016-11-15
When either of the below is the service account
LocalSystem
NT AUTHORITY\NetworkService

can a ssis package that is scheduled be able to do a cross-server action?

for example: 'Transfer SQL Server Objects Task' that copies from data from serverA to serverB.. is it
possible with the above 2 service accounts when the packages is scheduled as a job?
Comment
Watch Question

Sr. BI  Developer
Commented:
No, you'll need a domain account to do that. With correct permission on the other server.
Jason YousefSr. BI  Developer
Commented:
Just to add, you can use a local account that is identically created locally on the other server, with the same password I mean.  Never tried that before, But I've read about  it.

but most environments with servers are using a domain, that's why I first answered that you need a domain account.
CERTIFIED EXPERT
Top Expert 2012
Commented:
>>can a ssis package that is scheduled be able to do a cross-server action?<<
Sure.  You can even execute an SSIS package on Server A that moves data from Server B to Server C, providing you have the appropriate permissions.
Jason YousefSr. BI  Developer
Commented:
Local Service Account: This is a builtin windows account that is available for configuring services in windows. This account has permissions as same as accounts that are in the users group, thus it has limited access to the resources in the server. This account is not supported for SQL SERVER and AGENT services.

Local System Account: This is a builtin windows account that is available for configuring services in windows. This is a highly privileged account that has access to all resources in the server with administrator rights.

Network Service Account:
This is a builtin windows account that is available for configuring services in windows. This has permissions to access resources in the network under the computer account.

Domain Account: This account is a part of your domain that has access to network resources for which it is intended to have permission for. It is always advised to run SQL Server and related services under a domain account with minimum privilege need to run SQL Server and its related services.

Where can you see the Local System, Local Service and Network Service accounts? These are windows in-built accounts that are part of the operating system and assigned to the users, you cannot use the account to login to the system, these accounts are meant to be used for securing and authentication mechanism.

Read more: http://sql-articles.com/articles/general/sql-server-service-accounts/#ixzz1cZSvfmn2

Author

Commented:
thanks-

 the server (Let's call is ServerB) from which the package is going to be scheduled to run has "NT AUTHORITY\NetworkService" as the service account.

it will be running the scheduled package which as the 'Transfer SQL Server Objects Task'  which will try to bring data from the other server (ServerA) whose service account is LocalSystem

when i run this manually from ServerB it works.. when scheduled it fails..  do i need to change the service account for it to work (for a scheduled job) or do i need to add  "NT AUTHORITY\NetworkService" in server A?
Jason YousefSr. BI  Developer
Commented:
Because when you run it, it uses your credentials, but when you schedule it it uses the sql agent credentials, and you can't use the 'NetworkService' account in a domain environment.

change the service account to a domain or a user that has rights .

don't forget to restart the sql agent service after you change the account.
Alpesh PatelSolution Architect at TCS (SAFe®Agilist, TOGAF® Foundation, PSM I®, MCP, MCSD)
CERTIFIED EXPERT
Commented:
Yes, you have to execute SQL Job using the NT_Service Account with proper permission for remote server.

Author

Commented:
>>and you can't use the 'NetworkService' account in a domain environment.

what about LocalSystem?

Explore More ContentExplore courses, solutions, and other research materials related to this topic.