Solved

SBS 2011 and Premium Addon

Posted on 2014-02-19
10
296 Views
Last Modified: 2014-02-24
Hi,

I have an SBS 2011 server and I have also installed another Windows Server 2008 R2 server which will have SQL 2008 R2 on it for SAGE 200. I have added the Windows Server 2008 R2 server directly (without the connect tool) and it is showing on the SBS 2011 server but under client not under server, is this correct?

The second question is I have logged onto the Windows Server 2008 R2 with the SBS domain administrator credentials and I was going to provide these to the third party that is going to manage and setup the SQL server, providing these details will give them unrestricted access and should prevent complications moving forward in terms of permissions, is this the correct way to proceed or should I create a separate restricted account for the SQL server?

Thanks in advance
0
Comment
Question by:Tahir2008
  • 5
  • 4
10 Comments
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 39872181
I use special accounts for services and for sql server .. this way if I change the administrator password then I don't have to worry about which services / applications also have to be updated with the new administrator password.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 39873134
Agree do not give your contractor "the keys to the kingdom".
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 39873154
also no the server is NOT In the correct OU.  It should be moved to SBS Servers
0
 
LVL 1

Author Comment

by:Tahir2008
ID: 39873157
Thanks, I have moved it now to the correct OU, I just didn't want to move it in case it had some adverse impact.

With regards to the SQL, I will talk to the third party to see what they prefer as previously they just used the Windows domain administrator account details and all worked fine.

Thanks again
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 39873185
Ok. Whose the domain admin?  You are.  Don't ask the third party what they want.  It's your network.  Best practice is no one gets the the domain admin password if they are not a domain admin in the company.   Of course they want domain admin access, but this adds risk that they can harm the server in other ways
0
Give your grad a cloud of their own!

With up to 8TB of storage, give your favorite graduate their own personal cloud to centralize all their photos, videos and music in one safe place. They can save, sync and share all their stuff, and automatic photo backup helps free up space on their smartphone and tablet.

 
LVL 1

Author Comment

by:Tahir2008
ID: 39873417
I am the domain admin but they were the previous IT company before we took over and they manage the Sage 200 service which the business relies on heavily and we cant support that, so them having admin access wont really be an issue. We are working together at present on the new server deployment to some extent anyway.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 39874168
Well I'm sure they would like to have the business back.  If they have the domain admin password, they're free to explore the entire server and possibly try to make you look bad.

I have a similar situation with a client.  I manage the servers along with an internal person.  The company who provides SAGE support has a user account called SAGESUP.  It has full control over the SAGE shares.   You can tweak that as needed.
0
 
LVL 1

Author Comment

by:Tahir2008
ID: 39874414
My problem is as I dont know anything about SQL I dont know what permissions I would need to really assign them to ensure they dont have any problems.
0
 
LVL 35

Accepted Solution

by:
Cris Hanna earned 500 total points
ID: 39874446
I'm not a SQL guy either.  I always hire that work out.   So I create the account for the support person.  Then I ask them what permissions they need to do what they need to do.  If they ask for domain admin I simply tell them no.   and ask again.

Here's an article on how to make a domain user account a SQL Admin account.
http://www.perlustro.com/resources/installation-overview/elevate-user-to-server-admin
0
 
LVL 1

Author Closing Comment

by:Tahir2008
ID: 39882096
Thanks for the assistance your answer makes the most sense.
0

Featured Post

Free book by J.Peter Bruzzese, Microsoft MVP

Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Microsoft  Partnership 1 65
Windows Server 2012 R2 -- "RemoteApps" CAL cost ? 2 43
Windows 10 Firewall question 5 73
SBS 2003 RWW Login 3 16
Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

25 Experts available now in Live!

Get 1:1 Help Now