locked
SQL Setup Service Account Question RRS feed

  • Question

  • Hi,

    I want to install SQL Server 2008 R2 Standard on 2 different server-machines (both have Windows Server 2008 R2) both part of a third (Windows Small Business Server 2011 Essentials) server that acts as the domain controller. If I create a user (e.g. SQL_Service) on the domain controller that will act as the service account (=account for the different SQL services asked during setup) during SQL Server installation can I use this same account for the 2 SQL Server installations?

    Thanks.

    Guy

     

    Thursday, February 2, 2012 7:54 AM

Answers

  • @Peja:

    Should the SQL Administrator account e.g. sqladmin have specific windows rights when creating this windows user?

    The sql service account e.g. sqlservice should'nt have any specific windows right if i'm right?

    Thanks.

    Guy

    @Guy

    You don't need to set specific windows rights to SQL Administrator account  and  sql service account. When your service account on SQL server need to access the other resource on the other machine in the domain, it will impersonate to local machine account.


    Best Regards,
    Peja

    Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    • Marked as answer by Peja Tao Thursday, February 16, 2012 7:13 AM
    Monday, February 13, 2012 1:45 AM

All replies

  • Guy

    If both are members of domain create AD login and use that login to setup SQL Server, BTW, you can choose during the installation LocalSystem login and replace it later on with that domain account.Do not forget to add a domain login (during the installation) to be able connect to SQL Server


    Best Regards, Uri Dimant SQL Server MVP http://dimantdatabasesolutions.blogspot.com/ http://sqlblog.com/blogs/uri_dimant/
    • Proposed as answer by Peja Tao Friday, February 3, 2012 2:02 AM
    Thursday, February 2, 2012 8:31 AM
  • @Uri: Thanks. So to conclude:

    1. On the service Accounts page logon account -> eg domain user SQL_Service (eg same account for all services)

    2. Should I the Administrator account of the domain controller as user to connect to SQL server (database + SQL analysis) or creating another user specific for SQL Server and if so what is a best practice naming for tjis account?

    Thanks.
    Guy

    Thursday, February 2, 2012 8:44 AM
  • Hi,

    On the same domain you can access that account. Due to all instances are different will work as different.


    - Sekilha
    Thursday, February 2, 2012 3:59 PM
  • 2. Should I the Administrator account of the domain controller as user to connect to SQL server (database + SQL analysis) or creating another user specific for SQL Server and if so what is a best practice naming for tjis account?

    Thanks.
    Guy

    @Guy ,
    It is always advised to run SQL Server and related services under a domain account with minimum privilege need to run SQL Server and its related services.

    When you open the Configuration Manager you will see atleast 7 services:  Integration Services, FullText Search, SQL Server, Analysis Services, Reporting Services, Browser, and Agent. These are visible provided you have installed with all available features of SQL Server.
     
    The following list that are definitive on the aspect of practices you need to follow:
     
    Configuration -Service Accounts, SQL Server 2005 - Setting Up Windows Service Accounts
    http://msdn2.microsoft.com/en-us/library/ms143691.aspx
    http://msdn2.microsoft.com/en-us/library/ms143504.aspx

    Configuration -Service Accounts, SQL Server or SQL Server Agent service account
    http://support.microsoft.com/kb/283811/en-us
    http://msdn2.microsoft.com/en-us/library/ms143691.aspx

    Configuration -Service Accounts,Selecting an Account for the SQL Server Agent Service
    http://msdn2.microsoft.com/en-us/library/ms191543.aspx
    http://support.microsoft.com/kb/907557


    Best Regards,
    Peja

    Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Guy Dillen Saturday, February 4, 2012 12:40 AM
    • Unmarked as answer by Guy Dillen Wednesday, February 8, 2012 12:48 PM
    Friday, February 3, 2012 2:14 AM
  • Thanks.

    For the service accounts (as I already mentioned) I'll create a SQL_Service (local) account since one of my SQL Server installations are not on a machine that belongs to a domain. I have still a question: if I create besides the user account for the services (SQL_Service) an account for SQL Server administrator purposes should have this account specific (Windows) rights? To install SQL Server should I use this user or just the Administrator account?

    Thanks.

    Guy


    • Edited by Guy Dillen Thursday, February 9, 2012 7:43 PM
    Monday, February 6, 2012 4:44 PM
  •  I have still a question: if I create besides the user account for the services (SQL_Service) an account for SQL Server administrator purposes should have this account specific (Windows) rights? To install SQL Server should I use this user or just the Administrator account?

    Thanks.

    Guy


    @Guy
    For installation purpose, local Administrator account is fine.


    Best Regards,
    Peja

    Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    • Marked as answer by Guy Dillen Friday, February 10, 2012 7:28 AM
    • Unmarked as answer by Guy Dillen Saturday, February 11, 2012 10:13 AM
    Friday, February 10, 2012 1:35 AM
  • @Peja:

    Should the SQL Administrator account e.g. sqladmin have specific windows rights when creating this windows user?

    The sql service account e.g. sqlservice should'nt have any specific windows right if i'm right?

    Thanks.

    Guy

    Saturday, February 11, 2012 10:15 AM
  • @Peja:

    Should the SQL Administrator account e.g. sqladmin have specific windows rights when creating this windows user?

    The sql service account e.g. sqlservice should'nt have any specific windows right if i'm right?

    Thanks.

    Guy

    @Guy

    You don't need to set specific windows rights to SQL Administrator account  and  sql service account. When your service account on SQL server need to access the other resource on the other machine in the domain, it will impersonate to local machine account.


    Best Regards,
    Peja

    Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    • Marked as answer by Peja Tao Thursday, February 16, 2012 7:13 AM
    Monday, February 13, 2012 1:45 AM