Re: sql server 2005 setup question

Tech-Archive recommends: Fix windows errors by optimizing your registry




"ts" <ts@xxxxxxxxxxxxx> wrote in message
news:%23l1Z$M0iJHA.5588@xxxxxxxxxxxxxxxxxxxxxxx
what is the best way to set up sql server 2005 express?
by default, I think system services is used to run the service.

Can I use a regular user with service privilege to run teh service?
how can I make sure a particular attached instance can only be started and
accessed by a particular security group?


Microsoft seems to recommend that you create domain user accounts to run the
SQL Server services. See these links:

http://msdn.microsoft.com/en-us/library/ms143719(SQL.90).aspx

http://msdn.microsoft.com/en-us/library/ms144228(SQL.90).aspx

http://technet.microsoft.com/en-us/library/ms143504.aspx

For SQL Server Express, you only need to start the Instance, and perhaps the
AD Helper service. These accounts are used to start the services only and
should have long, complex passwords.

I use Windows Integrated Authentication, so I create domain groups for
permissions in the databases. I create database roles with the desired
permissions in the database and assign the role to the domain group. All
members of the group get the permissions needed. I remove permissions for
the public role. If you use SQL logins, you create the SQL logins and grant
them the required permissions in each database.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--


.



Relevant Pages

  • ADP, Application Role, and objects
    ... The above link is to an atricle on how to implement SQL Server Application ... After you connect with your ADP, fire a bit of code to set the ... third party tools to view the data on the same database. ... Scenario 1 - If I explicitly grant permissions on that object to the user ...
    (microsoft.public.access.adp.sqlserver)
  • Re: Execute Persmission denied on object sp_OACreate
    ... > SQL Server is creating a job behind the scenes. ... > permissions. ... > SA account password and gaining access to the database. ... >>> How can get a user permissions to execute these stored procedures ...
    (microsoft.public.sqlserver.security)
  • Re: Newbie: I dont understand user permissions for table access
    ... > My database is remote to my workstation. ... > tables/fields WITHOUT specifying anything in the permissions dialogs? ... >> HOW are you connecting to SQL Server? ... what rights/permissions have been granted to the PUBLIC role? ...
    (microsoft.public.sqlserver.server)
  • Re: Execute Persmission denied on object sp_OACreate
    ... SQL Server is creating a job behind the scenes. ... SA account password and gaining access to the database. ... > SQL Server doesn't check permissions on indirectly referenced objects as ... > the proxy account security context for non-sysadmin users from Enterprise ...
    (microsoft.public.sqlserver.security)
  • Re: Security question ..
    ... What I want to prevent is any access to the database accept through our ... application unless you have elevated permissions. ... Authentication, if he is smart enough to create an NT Auth ODBC connection ... passes through to the database or to use SQL Server authentication. ...
    (microsoft.public.sqlserver.server)