Re: MSDE Service permissions

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: LM (leonm_at_vtn-tech.com)
Date: 08/20/04 

Date: Fri, 20 Aug 2004 10:11:02 -0600

Hi Andrea,

By default the services use Local System option for log on. This worked fine
for all admin users but did not work for a non-admin user. When a non-admin
user logs in (local or domain user), the services won't start using Local
System. (side note: this is on a WinXP Pro machine). The non-admin user
cannot start or stop any service.

We did get it to work for the non-admin user by using the local
administrator account for log on (I goofed when trying it the first time by
using domain admin password instead of local admin password). This is not
the way we want to go, but it's the only way it does work right now.

I did find one thing via your link, in the Installation Recommendations:
"Create a least privileged local account with which to run the SQL Server
service. Use this account when you are prompted for service settings during
setup. Do not use the local system account or an administrator account. "
There is no prompt when installing MSDE. What exactly is a "least priviledge
local account"?

Any other suggestions are most welcome!

Thanks for your help.
leon.

"Andrea Montanari" <andrea.sqlDMO@virgilio.it> wrote in message
news:2okhj5Fbml6lU1@uni-berlin.de...
> hi Leon,
> "LM" <leonm@vtn-tech.com> ha scritto nel messaggio
> news:Oe0QyXhhEHA.904@TK2MSFTNGP09.phx.gbl...
> > Hi All,
> >
> > I'm installing MSDE 2000 with a custom application (launched using
> > setup.exe, not integrating merge modules) and am having a problem with
the
> > service permissions for SQL services. The custom app installer is being
> > build with Installshield Pro 6.3.
> >
> > Everything works fine for admin users, but MSDE won't start for
non-admin
> > users. The MSSQL$Instance service won't start unless it's logging on a
> Local
> > System.
> >
> > I need non-admin users to have access to the database.
> > Is there any way to setup MSDE on install to work for everyone?
> > What does one need to do to manually configure it after install to work
> for
> > everyone?
>
> usually MSDE is installed setting the relative services account to
> LocalSystem, that provide (far) enought privileges (on the local machine)
> for all logged users...
> have a look at
>
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/THCMCh18.asp
> for more restrictions..
> --
> Andrea Montanari (Microsoft MVP - SQL Server)
> http://www.asql.biz/DbaMgr.shtm http://italy.mvps.org
> DbaMgr2k ver 0.8.0 - DbaMgr ver 0.54.0
> (my vb6+sql-dmo little try to provide MS MSDE 1.0 and MSDE 2000 a visual
> interface)
> --------- remove DMO to reply
>

Relevant Pages

  • Re: Apple recommending anti-virus software for Macs?
    ... > Since you don't need to be root to do anything on OS X, ... Let's say you made a second administrative account, ... You do something (in each account: admin vs. non-admin) in SysPref ... Otherwise, the non-admin user would have to 'su admin-user', ...
    (comp.sys.mac.system)
  • Re: XP: Cool feature with a weakness
    ... it would allow a non-Admin user to make such changes for other OS X ... a moment and talk about how a non-Admin user can alter settings for other ... "I can, from a user account, hold down the control, option and Apple ... Snit will change the criteria from his OP: ...
    (comp.sys.mac.advocacy)
  • Re: How to prevent GPF dialogs for admins
    ... Does this only happen with in a TS session? ... Does this happen to other non-admin user TS sessions? ... they will receive multiple dialogs / notifications of these errors. ... for Admin users? ...
    (microsoft.public.windows.terminal_services)
  • Re: Running an app as admin in non-admin account
    ... to run as a non-admin user. ... account locked down, her user account is of the non-admin variety. ... Is there a way I can run this game as an admin by authenticating for her ... (without password prompt), do a get info and from the finder and set the ...
    (uk.comp.sys.mac)
  • Re: Running an app as admin in non-admin account
    ... to run as a non-admin user. ... As we take advantage of the OS X parental control stuff to keep her account locked down, her user account is of the non-admin variety. ... Is there a way I can run this game as an admin by authenticating for her ... (without password prompt), do a get info and from the finder and set the ...
    (uk.comp.sys.mac)