RE: Service account

Hello,

By default, domain admin group shall be a in the local administrators group
and they shall have the local admin rights. If you remove them manually,
you may need to add then to local admin group, or grant the proper
permission so that they may have the enough permission as service startup
account. You may want to rerfer to the followin article in SQL Books Online
for related information:

Setting Up Windows Service Accounts
ms-help://MS.SQLCC.v9/MS.SQLSVR.v9.en/instsql9/html/309b9dac-0b3a-4617-85ef-
c4519ce9d014.htm

If anything is unclear or you have any comments, please feel free to let's
know. Thank you.

Best Regards,

Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications
<http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx>.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
<http://msdn.microsoft.com/subscriptions/support/default.aspx>.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • Re: Domain Admins removed from local admin group
    ... "restricted grups. ... Even if the user is local admin and removes the domain admins ... admin group. ...
    (microsoft.public.windows.server.general)
  • Re: local computer admins
    ... > We want to use group policy to control what accounts get put into the> administrators group on users pcs. ... > admin group in the domain, put users in there, and add that group to their> pc. ... The problem here is that everyone in that group gets local admin to> all ... > the computers that have the domain local admin group. ...
    (microsoft.public.win2000.active_directory)
  • Re: local computer admins
    ... > We want to use group policy to control what accounts get put into the> administrators group on users pcs. ... > admin group in the domain, put users in there, and add that group to their> pc. ... The problem here is that everyone in that group gets local admin to> all ... > the computers that have the domain local admin group. ...
    (microsoft.public.windows.group_policy)
  • Admin rights removed
    ... Reinstall JRE under her account? ... >I have a user that was once a local admin on W2K ... >Admin group, and placed into the power user group. ...
    (microsoft.public.win2000.security)
  • Re: cracking local admin account
    ... he can reset the local admin password and do many other things. ... defend against this, configure the boot order in the BIOS, set a BIOS ... local admin access and support it themselves. ...
    (microsoft.public.security)