June 16, 2010 at 11:31 am
Hi,
I'm installing SQL Server 2008 and I have changed the Service account names for all services to abc\mssqlsrv But I'm Unable to change the SQL Server 2008 Browser service default account name NT AUTHORITY\LOCAL SERVICE.
So can we change the default account name NT AUTHORITY\LOCAL SERVICE to abc\mssqlsrv for Browser service or NOT? Does this supported?
Please advice me
Thanks
June 16, 2010 at 11:42 am
there is no need for that to be changed !
all it does is provide the port number to a request that uses the instance name of a named instance.
from bol:
Account Privileges
SQL Server Browser listens on a UDP port and accepts unauthenticated requests by using SQL Server Resolution Protocol (SSRP). SQL Server Browser should be run in the security context of a low privileged user to minimize exposure to a malicious attack. The logon account can be changed by using the SQL Server Configuration Manager. The minimum user rights for SQL Server Browser are the following:
Deny access to this computer from the network
Deny logon locally
Deny Log on as a batch job
Deny Log On Through Terminal Services
Log on as a service
Read and write the SQL Server registry keys related to network communication (ports and pipes)
Default Account
Setup configures SQL Server Browser to use the account selected for services during setup. Other possible accounts include the following:
Any domain\local account
The local service account (not available on W2K platforms)
The local system account (not recommended as has unnecessary privileges)
Check Books online "SQL Server Browser Service "
ps with SQL2005 setting it to something else may cause it to be unresponsive, hence no instances available.
Johan
Learn to play, play to learn !
Dont drive faster than your guardian angel can fly ...
but keeping both feet on the ground wont get you anywhere :w00t:
- How to post Performance Problems
- How to post data/code to get the best help[/url]
- How to prevent a sore throat after hours of presenting ppt
press F1 for solution, press shift+F1 for urgent solution 😀
Need a bit of Powershell? How about this
Who am I ? Sometimes this is me but most of the time this is me
June 16, 2010 at 11:58 am
Thanks,
SQL Server 2008 set up will take default account name NT AUTHORITY\LOCAL SERVICE for the Browser service while installation (we cannot change it while installing) and we can change it after the installation to a domain account, if we want to. right? please correct me if I misunderstood!
June 16, 2010 at 11:53 pm
Indeed.
Johan
Learn to play, play to learn !
Dont drive faster than your guardian angel can fly ...
but keeping both feet on the ground wont get you anywhere :w00t:
- How to post Performance Problems
- How to post data/code to get the best help[/url]
- How to prevent a sore throat after hours of presenting ppt
press F1 for solution, press shift+F1 for urgent solution 😀
Need a bit of Powershell? How about this
Who am I ? Sometimes this is me but most of the time this is me
June 21, 2010 at 4:02 am
You can change the SQL Browser account after the install, or if you are doing a command-line install you can use the (undocumented) /BROWSERSVCUSERNAME and /BROWSERSVCPASSWORD parameters.
Original author: https://github.com/SQL-FineBuild/Common/wiki/ 1-click install and best practice configuration of SQL Server 2019, 2017 2016, 2014, 2012, 2008 R2, 2008 and 2005.
When I give food to the poor they call me a saint. When I ask why they are poor they call me a communist - Archbishop Hélder Câmara
June 21, 2010 at 4:31 am
ALZDBA (6/16/2010)
there is no need for that to be changed !
Ditto. No need to change it.
I don't say it's just looking for trouble, but there's no need to change it.
That service doesn't need to read data on any local or remote machine, localsystem can be used with no worries.
-- Gianluca Sartori
June 21, 2010 at 4:37 am
Although there is no desperate need to change the account for SQL Browser, I can understand concerns about it using local service because this is a high-privilege account.
Each site will need to take its own view on the security issues, and either leave the SQL Browser account as it is, or change it to use a low privilege account.
Original author: https://github.com/SQL-FineBuild/Common/wiki/ 1-click install and best practice configuration of SQL Server 2019, 2017 2016, 2014, 2012, 2008 R2, 2008 and 2005.
When I give food to the poor they call me a saint. When I ask why they are poor they call me a communist - Archbishop Hélder Câmara
Viewing 7 posts - 1 through 6 (of 6 total)
You must be logged in to reply to this topic. Login to reply