Account to Run SQL under?

From: Peter The Spate (anonymous_at_discussions.microsoft.com)
Date: 02/25/05 

Date: Fri, 25 Feb 2005 07:27:34 -0800

Its not a wise choice to make the User IDs local to the
server, the reason is that non local user id's (i.e.
domain accounts) can be allocated email accounts so sql
server can send emails, whereas local userid's cannot.

If you do not want local administrators to have system
admin access rights then all you need to so is restrict
the BUILTIN\Administrators rights.

Peter

"Only two things are infinite, the universe and human
stupidity, and I'm not sure about the former."
Albert Einstein

>-----Original Message-----
>Currently, our network/server/domain admins have admin
control of our sql
>servers. One manager wants to run sql under a special
local admin account
>to restrict this access, but then we will be effected by
the password change
>requirement, which could break sql every 90 days.
>
>What is the best way to run sql so that the server admins
don't have sql
>admin access? Can I run it under "local system", and
restrict machine
>admins?
>
>
>.
>

Relevant Pages

  • Re: SQL MAIL and Sql Server Agent problem
    ... know how to prove that I am using the same account for SQL Server and SQL ... Is it a true statement that if the accounts are different I ... Exchange setup by just rebooting the server. ...
    (microsoft.public.sqlserver.connect)
  • Cant start the SQLAGENT
    ... I'm tired of trouleshoot one of my sql box that the sqlagent can't ... SQLServerAgent could not be started (reason: ... server ''; SQLServerAgent cannot start) ... local admin accounts none of them can start the service. ...
    (comp.databases.ms-sqlserver)
  • Re: Maximum Number of Database Users and Roles
    ... > of security accounts for sql server is 16379 ... > originally setup using a Windows Domain Group and users to access our sql ... > server database. ... > How are you accessing your database using sql secrutiy accounts with> ...
    (microsoft.public.inetserver.asp.db)
  • Re: Server or Service Accounts complete lockdown?
    ... The devs should have had their own accounts. ... Individual accounts also assists in discovering the "who done it". ... If the access to the SQL databases by the IIS application is not done ... Microsoft MVP (Windows Server: Security) ...
    (microsoft.public.security)
  • SQL Injection
    ... My server was badly infected by SQL Injection. ... First use the kill char functions to validate proper input. ... j) Code Access Security to Restrict File I/O ...
    (microsoft.public.dotnet.framework.aspnet.security)