Link to home
Start Free TrialLog in
Avatar of Tahir2008
Tahir2008

asked on

SBS 2011 and Premium Addon

Hi,

I have an SBS 2011 server and I have also installed another Windows Server 2008 R2 server which will have SQL 2008 R2 on it for SAGE 200. I have added the Windows Server 2008 R2 server directly (without the connect tool) and it is showing on the SBS 2011 server but under client not under server, is this correct?

The second question is I have logged onto the Windows Server 2008 R2 with the SBS domain administrator credentials and I was going to provide these to the third party that is going to manage and setup the SQL server, providing these details will give them unrestricted access and should prevent complications moving forward in terms of permissions, is this the correct way to proceed or should I create a separate restricted account for the SQL server?

Thanks in advance
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image

I use special accounts for services and for sql server .. this way if I change the administrator password then I don't have to worry about which services / applications also have to be updated with the new administrator password.
Agree do not give your contractor "the keys to the kingdom".
also no the server is NOT In the correct OU.  It should be moved to SBS Servers
Avatar of Tahir2008
Tahir2008

ASKER

Thanks, I have moved it now to the correct OU, I just didn't want to move it in case it had some adverse impact.

With regards to the SQL, I will talk to the third party to see what they prefer as previously they just used the Windows domain administrator account details and all worked fine.

Thanks again
Ok. Whose the domain admin?  You are.  Don't ask the third party what they want.  It's your network.  Best practice is no one gets the the domain admin password if they are not a domain admin in the company.   Of course they want domain admin access, but this adds risk that they can harm the server in other ways
I am the domain admin but they were the previous IT company before we took over and they manage the Sage 200 service which the business relies on heavily and we cant support that, so them having admin access wont really be an issue. We are working together at present on the new server deployment to some extent anyway.
Well I'm sure they would like to have the business back.  If they have the domain admin password, they're free to explore the entire server and possibly try to make you look bad.

I have a similar situation with a client.  I manage the servers along with an internal person.  The company who provides SAGE support has a user account called SAGESUP.  It has full control over the SAGE shares.   You can tweak that as needed.
My problem is as I dont know anything about SQL I dont know what permissions I would need to really assign them to ensure they dont have any problems.
ASKER CERTIFIED SOLUTION
Avatar of Cris Hanna
Cris Hanna
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks for the assistance your answer makes the most sense.