SQL servers vs Admin
how can I check the domain admin password will impact on the SQL server and its services ? do we have to check the services one by one or is there any place where i can cross check the windows setting in the sql server . i am trying to change the domain admin password ? so that need to get the confirmation that want affect the SQL and the rest .
when I am trying to login to the sql server has two options windows or SQL . if i select the windows it doesn't ask the password and going to the SQL . if i change the password , I hope it will take the changes automatically .
do I have to take any best practice at the time of changing the domain password ?
when I am trying to login to the sql server has two options windows or SQL . if i select the windows it doesn't ask the password and going to the SQL . if i change the password , I hope it will take the changes automatically .
do I have to take any best practice at the time of changing the domain password ?
how can I check the domain admin password will impact on the SQL server and its services ?Is the Domain Admin having access to your SQL Server?
ASKER
yes .Admin as well as new user call DDDSQL and DDDsql is the one is running the SQL services . but both the accounts are there .
is there any admin account any relationship with Network service and Local system ? we have few servers services are running with that service .
is there any admin account any relationship with Network service and Local system ? we have few servers services are running with that service .
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
normally best practice is to isolate the admin and granting the administrators group access to those who need the admin rights . is this correct ? or some people are saying that some activities cant handle without the admin ?
i hope we need to change the admin password how frequently ?
i hope we need to change the admin password how frequently ?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
we are not going to login to SQL server . but we want to know any SQL cluster service or any other thing setup with the admin
best practice only for the windows admin we are referring . I hope we can add the users those who need the admin right required in to administrator group
yes we have two network admin and two db admins . so we have give admin group membership for all 4 ? is that the right way
best practice only for the windows admin we are referring . I hope we can add the users those who need the admin right required in to administrator group
yes we have two network admin and two db admins . so we have give admin group membership for all 4 ? is that the right way
yes we have two network admin and two db admins . so we have give admin group membership for all 4 ?Why a network admin need to do inside a SQL Server instance? I guess that DB admins also aren't performing any network management task, right?
Each role should have their own limitations so they don't override others tasks.
ASKER
Sql users are not doing any network management and windows admin not doing any SQL activity . how can we separate the admin functionality separately . we have separate sql service start person as windows user . SQL has its own SA and some servers login as windows authentication . I hope windows authentication where we can limit the SQL admin rights from the windows level . but I have no idea what sort of rights needs to grant to SQL admin from the windows level and what sort of rights in the SQL server need to block for network admin ?
Check inside the SQL Server instance for the existing logins. If any of those logins belongs to a Windows or Network administrator, just remove them. They shouldn't have access to SQL Server in the first place so removing their logins will be the best thing to do.
ASKER
Thanks for getting access out from the SQL . how about the grant windows users to SQL access grant from the windows/network level
ASKER
is there any admin account any relationship with Network service and Local system ? we have few servers services are running with that service .
what is under service Local System ? local admin or ?
network Service ?
what is under service Local System ? local admin or ?
network Service ?
Local system is a local server owned account even stronger then local or domain admin.
They are totally seperated.
Networkservice is also locally owned to be able to communicate from server to server over the lan.
Again no Ties with admin what so ever.
They are totally seperated.
Networkservice is also locally owned to be able to communicate from server to server over the lan.
Again no Ties with admin what so ever.
ASKER
these two accounts are system and there is no place to enter the password ?
service account is just a domain account with the normal users password but it is name as service ? is 't it
one of our support party is asking us to create a separate service account for our backup purpose . same way if we have 5 sql servers do we need to have 5 windows service accounts to start the service ?
service account is just a domain account with the normal users password but it is name as service ? is 't it
one of our support party is asking us to create a separate service account for our backup purpose . same way if we have 5 sql servers do we need to have 5 windows service accounts to start the service ?
no place to enter the password !
Service account is just a local or domain account created for a specific task.
It kinda depends if those 5 accounts need different rights for each, if not necesarry to can simply create one domain account or X local accounts, again depends the need
Service account is just a local or domain account created for a specific task.
It kinda depends if those 5 accounts need different rights for each, if not necesarry to can simply create one domain account or X local accounts, again depends the need
You're jumping between Login accounts and Service accounts. Why's that?
ASKER
any option in the AD to create the service account like login account ?
Not sure what you mean.
Can you post here a screenshot from your SQL Server Configuration Manager with all Services listed so we can see what you have set for the services accounts?
Can you post here a screenshot from your SQL Server Configuration Manager with all Services listed so we can see what you have set for the services accounts?
ASKER
my question is service account also have to give password ? example backup purpose I have create a user for backup and use for that purpose
why we select SQl mixed vs windows only
why we select SQl mixed vs windows only
I believe your question and directly attached questions are answered long ago.
Please close this thread with awarding Some points to the best answers and open a new thread for other questions.
Please close this thread with awarding Some points to the best answers and open a new thread for other questions.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I believe the core question, how does a password reset for a domain admin is going to effect my server is best answered is my first replies. This should be marked as the solution.
I agree vitor has been more persistent in followup questions so he should have the slight majority off point as assisted solutions.
I agree vitor has been more persistent in followup questions so he should have the slight majority off point as assisted solutions.
BUT when you reset the pwd in AD sql server Will automatically accept the new pwd.
Before doing check on sql server services (services.msc) NO services are running under domain admin.
Cheers