none
Sql Server Log shipping RRS feed

  • Question

  • Hi,

       We have configured log shipping in our production setup. Now we are planning to change the service account from local system on which SQL Server is running to to other domain account.  

    Pls let me know changing the service account would have any impact on Log Shipping.

    Regards,

    Varun

    Tuesday, July 15, 2014 11:13 AM

Answers

  • Hi Varun,

    Make sure that the new domain account has enough permissions on  the shared location where the backups are being taken and where it is being copied to.

    Also only change the service accounts from SQL Server Configuration Manager. Other than this ideally there should not be any issue.

    Note: You will have to restart the SQL instances when you change the service account, so be prepared for the downtime.


    Regards, Ashwin Menon My Blog - http:\\sqllearnings.com

    • Proposed as answer by Santosh Chandel Tuesday, July 15, 2014 11:50 AM
    • Marked as answer by Raje14 Wednesday, July 16, 2014 4:42 AM
    Tuesday, July 15, 2014 11:40 AM
  • Hi n.varun,

    According to your description, about startup account for SQL Server and SQL Server Agent Services on Log Shipping Servers, if you have placed SQL Servers in a domain, Microsoft recommends that you use a domain account to start SQL Server services. As other post, the domain account has full control permissions on  the shared location and is sysadmin role in SQL Server security. Even if  you change the account form Local System to the domain account in SQL Server Configuration Manager (SSCM), it would have no impact on Log Shipping.

    In addition, if you configure SQL Server Log shipping in a different domain or workgroup, we need to verify that the SQL Server Agent service account running on the secondary server must have read access to the folder that the log backups are located in, and has permissions to the local folder that it will copy the logs to, then in secondary server, we can change the SQL Server Agent from using Local System to the domain account you are configuring. For more information, see: http://www.mssqltips.com/sqlservertip/2562/sql-server-log-shipping-to-a-different-domain-or-workgroup/

    There is an detail about how to configure security for SQL Server log shipping, you can review the following link.

    http://support.microsoft.com/kb/321247

    Regards,
    Sofiya Li


    Sofiya Li
    TechNet Community Support

    • Marked as answer by Raje14 Wednesday, July 16, 2014 4:42 AM
    Wednesday, July 16, 2014 2:16 AM
    Moderator

All replies

  • Hi Varun,

    Make sure that the new domain account has enough permissions on  the shared location where the backups are being taken and where it is being copied to.

    Also only change the service accounts from SQL Server Configuration Manager. Other than this ideally there should not be any issue.

    Note: You will have to restart the SQL instances when you change the service account, so be prepared for the downtime.


    Regards, Ashwin Menon My Blog - http:\\sqllearnings.com

    • Proposed as answer by Santosh Chandel Tuesday, July 15, 2014 11:50 AM
    • Marked as answer by Raje14 Wednesday, July 16, 2014 4:42 AM
    Tuesday, July 15, 2014 11:40 AM
  • Hi n.varun,

    According to your description, about startup account for SQL Server and SQL Server Agent Services on Log Shipping Servers, if you have placed SQL Servers in a domain, Microsoft recommends that you use a domain account to start SQL Server services. As other post, the domain account has full control permissions on  the shared location and is sysadmin role in SQL Server security. Even if  you change the account form Local System to the domain account in SQL Server Configuration Manager (SSCM), it would have no impact on Log Shipping.

    In addition, if you configure SQL Server Log shipping in a different domain or workgroup, we need to verify that the SQL Server Agent service account running on the secondary server must have read access to the folder that the log backups are located in, and has permissions to the local folder that it will copy the logs to, then in secondary server, we can change the SQL Server Agent from using Local System to the domain account you are configuring. For more information, see: http://www.mssqltips.com/sqlservertip/2562/sql-server-log-shipping-to-a-different-domain-or-workgroup/

    There is an detail about how to configure security for SQL Server log shipping, you can review the following link.

    http://support.microsoft.com/kb/321247

    Regards,
    Sofiya Li


    Sofiya Li
    TechNet Community Support

    • Marked as answer by Raje14 Wednesday, July 16, 2014 4:42 AM
    Wednesday, July 16, 2014 2:16 AM
    Moderator
  • ThanQ All....
    Wednesday, July 16, 2014 4:43 AM