Re: remove guest user in msdb

From: Roberto Pasqualini (RobertoPasqualini_at_discussions.microsoft.com)
Date: 07/23/04 

Date: Fri, 23 Jul 2004 02:51:04 -0700

Many thanks for your promplty response.
I haven't understand this.
So I have another question: in your your opinion while is the best security choice ?

1) Start the SQL_SERVER_AGENT with an NT administrator account, that have sysamind role
2) Assing the sysadmin role to an NT normal user account and use this to start the SQL_SERVER_AGENT.

The Microsoft security baseline analizer suggest that no have more than 2 sysadmin user.

Thanks

"Wayne Snyder" wrote:

> The login that SQL Agent uses MUST be a SQL Server Admin account or the
> agent will not start.
>
> So first do that.
> Then if it still does not start, add the login as a valid user to the MSDB
> database, then see.
>
> --
> Wayne Snyder, MCDBA, SQL Server MVP
> Mariner, Charlotte, NC
> www.mariner-usa.com
> (Please respond only to the newsgroups.)
>
> I support the Professional Association of SQL Server (PASS) and it's
> community of SQL Server professionals.
> www.sqlpass.org
>
> "Roberto Pasqualini" <Roberto Pasqualini@discussions.microsoft.com> wrote in
> message news:7206619A-0EB0-480C-84C0-9E99C2BF4751@microsoft.com...
> > In according of what I have found on various document I removed to user
> 'guest' from the msdb database. But now the SQL_Server_Agent don't start.
> > I run this service from a normal user NT account. In the log error of
> SQL_Server_agent i found this items:
> >
> > 1) [000] Unable to connect to server '(local)'; SQLServerAgent cannot
> start
> > 2) [298] SQLServer Error: 4060, Impossibile aprire il database richiesto
> nell'account di accesso 'msdb'. L'accesso avrà esito negativo. [SQLSTATE
> 42000]
> >
> > The only solution I have found is to add the NT account to the sysadmin
> role but I don't want to do this!
> > Anyone can help me ?
> > I run SQL 2K SP3 on WIN2K Server SP4
> > Thanks
>
>
>

Relevant Pages

  • Re: Move or Setup of SQL Database toa Remote Server Fails
    ... as well as have SysAdmin privileges on the DB. ... Registered type 501ST MASTER for 501ST SCCM1DB\master ... Could not connect SQL Server 'master' db. ... The SCCM Primary Site Computer Account and the User account I am using ...
    (microsoft.public.sms.setup)
  • Re: The Microsoft Search service cannot be administered under the pres
    ... the BUILTIN\Administrator account as well as a member of the Sysadmin role? ... SQL Server Full-Text Search Does Not Populate Catalogs ... you or your server's sysadmin have removed the ... exec sp_defaultdb N'NT Authority\System', N'master' ...
    (microsoft.public.sqlserver.fulltext)
  • Re: Schedule a DTS package
    ... Allan Mitchell MCSE,MCDBA, (Microsoft SQL Server MVP) ... www.SQLDTS.com - The site for all your DTS needs. ... >> owned by a sysadmin then the job will fire as the Service account. ...
    (microsoft.public.sqlserver.dts)
  • Re: Security issue when running packages from SQL Agent.
    ... only sysadmin role members can execute CmdExec steps by ... You will then be prompted to specify a valid Windows account ... for the SQL Server Agent proxy. ...
    (microsoft.public.sqlserver.security)
  • Re: Schedule a DTS package
    ... It does not mean you will avoid all the security problems. ... owned by a sysadmin then the job will fire as the Service account. ... Allan Mitchell MCSE,MCDBA, (Microsoft SQL Server MVP) ...
    (microsoft.public.sqlserver.dts)
Quantcast