Re: Server admin/service account - too many users

There is a best practice for you. You never use the "administrator" account
to run services. For programs such as SQL and Veritas or any other program
that requires an Administrative account to run a service, you need to
created "Admin" accounts and given these accounts the "Logon as a service"
rights.


"gstar" <gary.brett@xxxxxxxxx> wrote in message
news:1139855957.089262.255270@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,
I have a problem which needs resolving fairly quickly.. We have a
Win2003 AD server and 5 Win2000 member servers performing various
duties on the LAN. On the Win2000 servers I have an account which
allows the SQL developers to log on locally & remotely to perform tasks
but need to rescind this now due to some data delteions form SQL &
files overwrites in IIS! The developers have dev servers to work from
but I think there may have been a mix up & they copied the dev
directory to live casuing downtime to the website.

Is their a best practice for me, as I know if I simply change the
account password, services will not run such as SQL2000 , Veritas
backup exec server and their backup agents to name a few. I basically
want these servers locked down for anyone except the IT Director &
myself as we cannot afford to have data deleted from both drives & SQL!

Any advice would be much appreciated.
G



.

Relevant Pages

  • Re: Delegation problems
    ... What account is running SQL? ... appropriate SPNs. ... then it depends on how you are connecting to SQL. ... I have several other servers running SQL and the SQL ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: PerfMon recording to SQL 2005
    ... I tried it on two servers, one was the SQL box and the other was one that ... They are both Windows 2003 and I am ... and assigned them to be recorded via a DSN I created to the database on SQL. ... The user account I created in SQL is an owner of the database so writing to ...
    (microsoft.public.sqlserver.server)
  • Re: 2 Urgent Problems need to solve
    ... Is the SQL Server don't permit user to use a SP to get the data from ... You (or your windows account) are probably an administrator on all the ... servers, so your windows credentials get you mapped to "sa" on the ... Assuming you are using integrated security, I have found that logging on ...
    (microsoft.public.sqlserver.programming)
  • Re: Running SQLServer and SQLServer Agent as Power User
    ... > We're trying to limit the number of user accounts with Admin level permission ... > on our Win2K servers, ... Or does this account NEED to be local admin ... although not all sql feature are available. ...
    (microsoft.public.sqlserver.security)
  • Re: Howto refresh IIS 6 Application pool identity credential info
    ... The Application Servers are load balanced clustered, ... HostHeader names in IIS, it has a CNAME in DNS referencing ... Only account A has access to database DB-A ...
    (microsoft.public.inetserver.iis.security)