Minimum PC/Server Rights needed for "Log on as" acct for SQL Server DB engine

  • I was running my SQL Server 2005 db engine logged on as Local Host but then decided I wanted to give it more security on our network and replaced it with a network service acct. SQL Server would not start until I put that service acct in the local Administrators group.

    Is this necessary? I didn't think it was. I want to give the minimal rights necessary to this account on the server.

    Thanks,

    Gary

  • How did you change the account that SQL Server uses? If you used the services applet, then the required permissions were not assigned.

    You need to use SQL Server Configuration Manager to change the log on properties of SQL Server services. Using this will set the required permissions.

    Jeffrey Williams
    “We are all faced with a series of great opportunities brilliantly disguised as impossible situations.”

    ― Charles R. Swindoll

    How to post questions to get better answers faster
    Managing Transaction Logs

  • I changed it with Configuration Manager knowing it would put the acct in the necessary grps SQL Server creates.

    But later, I had to go into my local administrator and add the account in there and then the db services started.

    I am just not wanting to add more accts to the local administrator if not needed.

  • What error are you getting that is preventing sql server from starting?

    Jeffrey Williams
    “We are all faced with a series of great opportunities brilliantly disguised as impossible situations.”

    ― Charles R. Swindoll

    How to post questions to get better answers faster
    Managing Transaction Logs

  • This article explains the minimum privileges required for a SQL Server service account.

    Pradeep Adiga
    Blog: sqldbadiaries.com
    Twitter: @pradeepadiga

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply