Re: What Account Should Server Be Running?

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Keith Kratochvil (sqlguy.back2u_at_comcast.net)
Date: 11/30/04


Date: Tue, 30 Nov 2004 10:10:28 -0600

When SQL Server is installed it is installed as a service. You should
probably have a specific [network] account that you want to run SQL Server
under. You should not need to log in to a server so that SQL Server will
run. It is a service that can run while the server is in a logged off
state.

http://support.microsoft.com/kb/257716/EN-US/
15. Q. What account do I choose as the startup account? Can I change it
after installation?

A: SQL Server and SQL Server Agent are installed as Windows services. Both
services require a Windows user account to be set up as startup account.
During installation, you can choose which user account will be the startup
account. You can assign the same account for both services or different
accounts. You can use either the Local System Account or a Domain User
Account.

The local system account does not require a password, does not have network
access rights in Windows NT 4.0 and Windows 2000, and restricts your SQL
Server installation from interacting with other servers.

A domain user account uses Windows Authentication; that is, the same user
name and password used to connect to the operating system are also used to
connect to SQL Server. A domain user account is typically used because many
server-to-server activities can be performed only with a domain user
account, such as remote procedure calls, replication, backups to network
drives, heterogeneous joins, and SQL Mail. If after installation you need to
change the startup account for these services, you can do it either from the
Services applet or from SQL Server Enterprise Manager. Detailed instructions
are given in SQL Server Books Online under the topics "Setting up Windows
Services Accounts", "Services Accounts", and "Changing Passwords and User
Accounts".

-- 
Keith
"Bryan" <Bryan@discussions.microsoft.com> wrote in message
news:3883F086-5C0A-4133-8712-9409D52F5BF2@microsoft.com...
> This may be a non-sensical question, but...  I was told that SQL Server
> should run in an active server session other than the administrator.  This
> came up because SQL services would not come up automatically upon reboot
of
> the server, as they had been apparently set  to automatically run at
bootup
> while logged in as a different user on the server at some point in the
past.
> Services had to be started manually with the other credentials.  I was
told
> by a tech support person for a product that runs on Microsoft SQL that we
> should be running our server under a created account that is not
> Administrator.  (??)  Any help by a true techie would be appreciated.


Relevant Pages

  • RE: Getting to the bottom of MSDE network connection problems ...
    ... the way using the same installation scenario on Win2K works with no problem. ... > various versions of MSDE and Windows XP ... > and it seems the problems are due to Windows XP and not MSDE. ... > on a desktop OS like XP (meaning that, you can not compare SQL Server ...
    (microsoft.public.sqlserver.msde)
  • Re: Utter madness!
    ... It is just Windows security stuff. ... You can get a trusted connection back to SQL server. ... ASP.NET account (either processModel or app pool identity depending on ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Passthrough authenication w/ SQL trusted connection
    ... separate connection will be used for each security context (each user ... account will have it's own pool). ... if you are using a Windows 2000 Domain, ... backend SQL Server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Search services not available
    ... Let me clarify that our SQL server uses Windows Authentication, ... account, even if it was just for now to get it working, that would be easier ... I have configured the Search service to use this ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Permissions!
    ... This account is used because your web ... application is configured for anonymous access instead of integrated ... The details on how to use Windows ... SQL Server MVP ...
    (microsoft.public.sqlserver.security)