RE: Domain or Local User Account for Laptop SQL 2008 Services
- From: changliw@xxxxxxxxxxxxxxxxxxxx ("Charles Wang [MSFT]")
- Date: Wed, 13 Aug 2008 08:08:26 GMT
Hi cpnet,
For your questions, please see my answers below.
Q1: I think I'd like to use a Domain User Account for the SQL 2008 services, but if I do this, will SQL Server function properly when I'm not connected to my network?
Answer: SQL Server will try to connect to your domain controller for establishing authentication at startup if you configured your SQL Server service to a domain user account. If your computer
could not connect to your DC at that time, your SQL Server service could not start. Also if you want to have your SQL Server use Kerberos authentication, you must have your computer added
into the domain. If your computer is often offline from your domain network, I do not recommend that you use a domain user account for your SQL Server service.
Q2: If I do use a Local User account, let's say I later change the services to use a Domain user account (maybe to test some integration between servers). Is changing the Account info in the
service configuration tool the only thing I have to do, or do I have to assign particular groups/privileges to the newly assigned accounts?
Answer: When you have such needs, you can change your SQL Server service account by using SQL Server Configuration Manager or from Services pane. For example, open Services pane from
Control Panel, double click your SQL Server service, switch to the Log On tab and input the domain user account as the service account, and then restart your SQL Server services.
Indeed you also need to assign particular permissions to the domain user account. There are many ways for configuring permissions. For example, if you want to give an administrator to the
new domain user, you can explicitly create a new login from the domain account, and then assign the fixed server role "sysadmin" to it. If you want to only give some database permissions,
you can assign some database roles like db_owner, db_reader, db_writer etc to the user mapped to the login. Of course, you can create a local Windows user group, add the domain user to
the group, and then create a new SQL login from the Windows user group, and then assign permissions to the SQL login.
Hope this helps. If you have any other questions or concerns, please feel free to let me know. Have a nice day!
Best regards,
Charles Wang
Microsoft Online Community Support
===========================================================
Delighting our customers is our #1 priority. We welcome your
comments and suggestions about how we can improve the
support we provide to you. Please feel free to let my manager
know what you think of the level of service provided. You can
send feedback directly to my manager at: msdnmg@xxxxxxxxxxxxxx
===========================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notifications.
Note: The MSDN Managed Newsgroup support offering is for
non-urgent issues where an initial response from the community
or a Microsoft Support Engineer within 1 business day is acceptable.
Please note that each follow up response may take approximately
2 business days as the support professional working with you may
need further investigation to reach the most efficient resolution.
The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by
contacting Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
============================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
=========================================================
.
- Follow-Ups:
- References:
- Prev by Date: Re: Error installing SQL 2005 Express
- Next by Date: SQL 2000 Reporting Services for SQL 2000 Enterprise
- Previous by thread: Domain or Local User Account for Laptop SQL 2008 Services
- Next by thread: Re: Domain or Local User Account for Laptop SQL 2008 Services
- Index(es):
Relevant Pages
|
Loading