Solved

SQL - Setting Windows Service Acount

Posted on 2013-01-24
2
245 Views
Last Modified: 2013-02-10
I am installing SQL server 2008 R2.  As I am about to setup Account for each of the SQL Service.

It recommend to use different account for different service with minimal privilege  However,  I do not know how to setup specific account for it might have one of the following services  (Domain. Localsystem, Local-Service and Network Service)

Fore example, How do I setup a user account with Network Service
0
Comment
Question by:tommym121
2 Comments
 
LVL 24

Accepted Solution

by:
chaau earned 500 total points
ID: 38817359
Most of the time you would use a local user account created on the server you are installing SQL Server. Just go to your Server Manager and create new user. You can set the strongest password for the user you can think of and make the password to "Password Never Expires". Also, for a better security you can disable "User Can Login Locally".

If you are planning to use some external stored procedures that execute some script that requires network access to some domain resources, then you would create an account in your active directory.

For the SQL Agent it is a different story. You can user the same user, but if you are planning to run some automated backups that will store the files on a network share, you would have to create a user in Active Directory.

MS suggests using the SQL management console (or the installer) when changing the user accounts. In this case the security options will be properly adjusted for the users. If you change the accounts via Services.msc, not all rights could be assigned and SQL service may not work properly
0
 

Author Closing Comment

by:tommym121
ID: 38874830
Thanks
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
CONVERT date time to a different time zone. 2 42
GRANT, REVOKE, DENY 4 36
BULK INSERT most recent CSV 19 43
SQL Statement to Update Email Domain 2 19
There have been several questions about Large Transaction Log Files in SQL Server 2008, and how to get rid of them when disk space has become critical. This article will explain how to disable full recovery and implement simple recovery that carries…
SQL Server engine let you use a Windows account or a SQL Server account to connect to a SQL Server instance. This can be configured immediatly during the SQL Server installation or after in the Server Authentication section in the Server properties …
Concerto provides fully managed cloud services and the expertise to provide an easy and reliable route to the cloud. Our best-in-class solutions help you address the toughest IT challenges, find new efficiencies and deliver the best application expe…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

930 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now