Re: run services as?
- From: lucm@xxxxxxxxx
- Date: 13 Oct 2006 05:59:49 -0700
David Thielen wrote:
Hi;
For SqlServer 2005 what is the best way to run the services. I assumed
LocalSystem but one of the services won't run under that.
--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com
Cubicle Wars - http://www.windwardreports.com/film.htm
Unlike some other Microsoft products, SQL Server does not need a lot of
permissions on the host (which is a very good thing).
You should create a local, non-domain, non-administrator account for
every service, and give to it the required permissions (run as
service). This way, you can always monitor what account is accessing
what resource, and since those accounts are not on your Windows domain
they have no network access. Make those accounts members of a local
group, and give permissions on the SQL Server folders to this group.
Not using domain accounts is a good practice since your services will
keep running even if the domain goes down. It might be a little bit of
admin overhead, however in the long run you will find it handy,
especially if there is a network shortage while the server is scheduled
to run maintenance plans.
If you need to get or send files across the network inside a job, you
can write a script with NET USE.
If you need to perform system tasks in SQL jobs, like running WMI
scripts, try CPAU or another RunAs-style wrapper instead of giving the
account too much rights.
Regards,
lucm
.
- Prev by Date: Re: SP2
- Next by Date: Re: New Installation
- Previous by thread: Re: run services as?
- Index(es):
Relevant Pages
|
