June 5, 2006 at 6:22 am
I am trying to install SQL 2005 on a Windows 2003 cluster. All went well until I ran into the page asking for Domain Groups. So, I need to ask my System Administrator to create these groups for me. But I am confused as to what permissions these groups need? What are the minimum permissions? Can anyone point me in the right direction?
Thanks,
George
June 6, 2006 at 9:03 am
George,
The installation process will grant the groups all of the necessary permissions. SQL2K5 ACLs all registry keys and files based on groups rather than individual users. This makes changing service accounts a much easier action than in SQL2K. In a clustered environment the data files are stored on a shared disk. A local group on one machine will have a different GUID than a group with the same name on another machine. Since ACLs are really based on the GUID rather than the group name local groups cannot be used. This leaves domain groups as the only option.
If you run the services as a domain user you will either need the appropriate permission to add users to the domain group or have the user(s) added prior to running SQL setup. SQL setup will check if the service account is already part of the group, if it is it won't try adding it, if it isn't it will try adding it. Since setup is running under your context, if you have the appropriate permissions to add users to groups you'll be fine, if you don't, setup will fail. Adding the service account (domain account) to the group(s) prior to running setup is a safe workaround.
There are two Books Online topics you should read:
Service Accounts (Clusters): http://msdn2.microsoft.com/en-us/library/ms143763(SQL.90).aspx
Domain Groups for Clustered Services: http://msdn2.microsoft.com/en-us/library/ms345196(SQL.90).aspx
Good luck!
Dan
June 6, 2006 at 10:09 am
Dan,
Thanks for the information! I really appreciate it.
George
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply