Service Startup Accounts Security "Best Practice"

• ZeeAtl

  SSCommitted

  Points: 1569

  More actions

  February 3, 2010 at 11:30 am

  #229653

  I have both localsystem (DBEngine, Full Text, Browser, Agent) and NT Authorityetworkservice (SSIS). as Service login accounts.

  Should I create new lower privilege local or domain accounts or groups to handle these service startup logins?

  I had read (I remember, somewhere) that SSIS might require the networkservice account ?! The other services I'm pretty sure should use a low-privilege account or group.

  We use Windows authentication on all our SS instances.

  Zee, Atlanta, GA

• Shabba

  SSCertifiable

  Points: 5007

  More actions

  February 4, 2010 at 2:14 am

  #1113550

  Checkout this msdn link http://msdn.microsoft.com/en-us/library/ms143504.aspx