Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Setting up SQL Service account, how?

Posted on 2013-10-22
1
Medium Priority
?
286 Views
Last Modified: 2013-10-22
What are the best practices for setting up an SQL service account? Or How to do it? When i say how I am familiar with creating users I just don't know what permissions or group it should belong to. Should it be a local admin? A domain admin? With full rights limited rights?

Any help would be great. I changed active directory password and it caused me all sorts of problems because I did not have this setup correctly.
0
Comment
Question by:MEATBALLHERO
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 41

Accepted Solution

by:
Kyle Abrahams earned 2000 total points
ID: 39591480
The answer is it depends.

First you have to determine whether you want a domain user or a local user.

A local user will only have access to that machine
A domain user can potentially have access to other machines.   (useful for executing jobs or copying files to network paths, etc).

I usually prefer a domain account with local admin on the box where sql is, and then read/write permissions on other directories as needed . . . but that's for simplicity sake.  If you really wanted to lock it down, you can read more about the permissions actually required here:
http://msdn.microsoft.com/en-us/library/ms143504(v=sql.90).aspx
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question