October 25, 2009 at 7:28 am
Hi,
I want to change service account and Agent service account, from
local system account to windows authentication account.
I worked twice, but the third time the SQL service did not start
and the account could not be verified. I had to change back to
be able to start again.
I followed this description:
http://msdn.microsoft.com/en-us/library/aa197921(SQL.80).aspx
Hav anyone else had a similar problem?
Thanks!!
October 25, 2009 at 11:31 am
Can you share with us what is the error message in details?
What kind of access rights are given to your windows account on the server level and database level?
I suspect that the windows account doesn't have sufficient rights to start the SQL services.
October 25, 2009 at 2:29 pm
keep in mind it is best to change the service account using Enterprise manager. (it also takes care of the needed authorization for the new service account)
Johan
Learn to play, play to learn !
Dont drive faster than your guardian angel can fly ...
but keeping both feet on the ground wont get you anywhere :w00t:
- How to post Performance Problems
- How to post data/code to get the best help[/url]
- How to prevent a sore throat after hours of presenting ppt
press F1 for solution, press shift+F1 for urgent solution 😀
Need a bit of Powershell? How about this
Who am I ? Sometimes this is me but most of the time this is me
October 25, 2009 at 9:28 pm
I'm with ALZDBA. Use Enterprise Manager and don't worry about it.
October 25, 2009 at 11:15 pm
we can do it through services....is it not preferable?
October 26, 2009 at 12:29 am
ravikanth. (10/25/2009)
we can do it through services....is it not preferable?
No...Do as BOL, ALZDBA and Steve advise.
October 26, 2009 at 1:58 am
ravikanth. (10/25/2009)
we can do it through services....is it not preferable?
It is not perferable !
Using EM it does take care of all needed authorization.
So .... EM is the easy way.
Johan
Learn to play, play to learn !
Dont drive faster than your guardian angel can fly ...
but keeping both feet on the ground wont get you anywhere :w00t:
- How to post Performance Problems
- How to post data/code to get the best help[/url]
- How to prevent a sore throat after hours of presenting ppt
press F1 for solution, press shift+F1 for urgent solution 😀
Need a bit of Powershell? How about this
Who am I ? Sometimes this is me but most of the time this is me
October 26, 2009 at 4:18 am
I think there is a KB article about how to change the SQL service account using the Services applet. It includes the registry key permissions and file permissions that need to be changed for SQL Server 2000.
It is far easier to make the change with Enterprise Manager. One thing to remember is that you must be local admin both on the box where you run EM and on the target SQL Server box, and the new service account also needs to be a local admin on the target box.
Things were made a little more flexible with SQL 2005, where you could change the service account outside of Management Studio just so long as you added the new service account into the relevant local SQL Server groups. The need to be a local admin was also relaxed, but you needed specific Windows privileges if you were not a local admin.
The pendulum has swung again with SQL 2008, especially if you install on Windows 2008 or above. On Windows 2008, SQL uses a new concept of Service Sid, and you should always change the service account using Management Studio in order to get the proper security set up.
Original author: https://github.com/SQL-FineBuild/Common/wiki/ 1-click install and best practice configuration of SQL Server 2019, 2017 2016, 2014, 2012, 2008 R2, 2008 and 2005.
When I give food to the poor they call me a saint. When I ask why they are poor they call me a communist - Archbishop Hélder Câmara
October 26, 2009 at 7:18 am
I don't think the service account needs to be a local admin. If I remember correctly, we ran lots of SQL 2000 instances under a domain account that was not a local admin. EM assigns the rights needed. I believe your account (the account making the change) needs to be an admin on the target box to create the service account.
October 26, 2009 at 3:08 pm
It worked after restarting the server. No authentication request was sent from the server to the AD
server before reboot. I'm still not sure why it did not work directly the third time.
Thanks for all reponses!!
Viewing 10 posts - 1 through 9 (of 9 total)
You must be logged in to reply to this topic. Login to reply