sql server - Service Account

Hi experts, i am reading about Local Service Account

"The Local Service account is a built-in account that has the same level of access to resources and objects as members of the Users group. This limited access helps safeguard the system if individual services or processes are compromised. Services that run as the Local Service account access network resources as a null session without credentials. Be aware that the Local Service account is not supported for the SQL Server or SQL Server Agent services. Local Service is not supported as the account running those services because it is a shared service and any other services running under local service would have system administrator access to SQL Server. The actual name of the account is NT AUTHORITY\LOCAL SERVICE"

I do not understand this
Be aware that the Local Service account is not supported for the SQL Server or SQL Server Agent services

However, i configured the SQL Server or SQL Server Agent services with NT AUTHORITY\LOCAL SERVICE, view image
sql-server-services.png
enrique_aeoAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David ToddSenior DBACommented:
Hi,

The best way is for each service to run in their own domain account.

If you change this in SQL Config Manager, it adds all the rights that are needed, rather than doing this via the services manager applet.

The next best, a very close second is for all the sql on one instance to share a domain account. That is, I often share the account between sql server and sql agent. (Its hard enough just getting the domain account)

Otherwise use a local account on the computer.

I believe that SQL will work as Local System, but as you can see, it terms of preference is a distant last.

The reason that its not supported is due to interactions with everything else that might be using the same account.

Regards
  David
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft SQL Server

From novice to tech pro — start learning today.