August 19, 2008 at 4:59 am
I want to schedule the backup of databases over the network i.e. \\server\folder.
When I tried to backup I got a error that user does not have the permission to the folder even though I have the permission to create and drop files in that folder. Then I found that the service account on which the SQL Server starts has to have the permission to that folder.
The SQL Server service account uses the local account to start.
Here I have the problem. I am the DBA in the company,there is a sysadmin and administration group. I only handle SQL Server part, the sysadmin handles the server side and administration group everything.
The sysadmin logins using his name and administration using administrator login. Most of time the remote server is re-started by sysadmin and few times in his absence by administration but the server will be re-started at least twice in a week. My dilemma is that in which account to start the SQL Service so that who ever restarts the server the SQL Server should start and backup should happen. It will be a overhead if every time the server is restarted the login user has to check whether SQL Server is started.
August 19, 2008 at 5:21 am
create a domain account and have the agent service runas that account (use sql configuration manager to change the account details). Give this account permissions to whichever remote folders it requires.
-----------------------------------------------------------------------------------------------------------
"Ya can't make an omelette without breaking just a few eggs" 😉
August 19, 2008 at 5:22 am
Best practice would be to use a Dedicated User account for starting the SQL Services. If the sysadmin wants more security, he may disable the "Allow Interactive Logon" for this account.
Pradeep Adiga
Blog: sqldbadiaries.com
Twitter: @pradeepadiga
August 19, 2008 at 5:45 am
We have three Adimistrators so any of the three admin can restart the server.
They would have logged in their account and restarted the server it is difficult to remember for them to restart the server in domain account every time the server is started and their are many other services running in the server which depend upon admin login.
August 19, 2008 at 5:56 am
The account that's used to start SQL isn't the one that SQL runs under. If you go into the SQL Server configuration manager you can set the account that SQL Server runs under.
That should be set to a dedicated domain login (not administrator) that has enough rights for SQL to run and to do what it needs to do.
Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply