SQLServerAgent Service

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: "LvBohemian" <LvBohemian@xxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Fri, 10 Jun 2005 14:24:03 -0700

According to the following I can not run the SQLServerAgent Service with a
account that is not a member of the SysAdmin role...

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad_automate_3w8k.asp

Has there been any update to this?

This really blows!

Has anybody found a way to run SQLServerAgent Service without it being a
member of the SysAdmin Role?

I am trying to lock down my SQL Server 2000 SP3a databases and this is a
major impass for me!

The last thing I want to do is run a service that has full access to
everything in my database!

And at the minimum be a member of the machine local admin group...

We all know if that account gets cracked they can pretty much take over the
world so to speak...

There has to be someother way!
.

Prev by Date: Re: For XML Problem with IIS6 and W2k3
Next by Date: RE: OpenXML and namespaces
Previous by thread: Re: For XML Problem with IIS6 and W2k3
Next by thread: using MSSQL Server XML (SQLXML OLE DB) from C++ (MSVC6)
Index(es):
- Date
- Thread

Relevant Pages

Re: SQLServerAgent Service
... > SQLServerAgent Service ... > account that is not a member of the SysAdmin role... ... That's a really poorly written article, and if by "system account" they ...
(microsoft.public.sqlserver.security)
Re: SQLServerAgent Service
... > So what is your objection to running both under the LocalMachine account? ... it is not a member of any groups and therefore is also not a ... > the database Sysadmin role... ... > Event Source: SQLSERVERAGENT ...
(microsoft.public.sqlserver.security)
Re: Unauthorized user creating Computer accounts on AD
... I work as a sysadmin for company where a ... > He's neither a member of Enterprise Admin, Domain Admin, ... > or Account Operators group. ...
(microsoft.public.win2000.active_directory)
SQLServerAgent Service
... SQLServerAgent Service ... account that is not a member of the SysAdmin role... ... We all know if that account gets cracked they can pretty much take over the ...
(microsoft.public.sqlserver.security)
Re: SQLServerAgent Service
... So what is your objection to running both under the LocalMachine account? ... it is not a member of any groups and therefore is also not a member ... Administrators group and is therefore a member of the sysadmin group in SQL ... SQLServerAgent could not be started ...
(microsoft.public.sqlserver.security)