May 20, 2011 at 3:20 pm
Our job agent service starts with a domain account domain\sqlsrv. If we run a job I can see in the activity monitor that sqlsrv is running the job. My question is where can I find that login account within SQL Server. I looked in under the database and instance security and its not there. I can obviously see it in Windows Services but I don't see it on my instance of sql server. Please help.
May 20, 2011 at 3:24 pm
Is sqlsrv the actual Login Name?
For better, quicker answers on T-SQL questions, click on the following...
http://www.sqlservercentral.com/articles/Best+Practices/61537/
For better answers on performance questions, click on the following...
http://www.sqlservercentral.com/articles/SQLServerCentral/66909/
May 20, 2011 at 4:45 pm
Welcome to the new and improved security in Windows Server 2008 and SQL Server 2008. When you installed the system, there was a barely noticeable check box to use SID security.
With that box checked - you enabled a more secure way of running both SQL Server and Agent. This new security model create a service SID to the service - and then adds that service SID to SQL Server instead of the service account.
So now, the service has the necessary rights it needs to run - without granting unnecessary rights to the service account.
You should see in your logins the following:
NT SERVICE\MSSQLSERVER
NT SERVICE\SQLSERVERAGENT
Both of those logins will have sysadmin rights and are required for the services to run. As you will also see, the local groups are no longer added to SQL Server either. This closes the hole where a local administrator (or power user) could add themselves to one of the groups and automatically be granted full sysadmin rights to the database system.
Jeffrey Williams
“We are all faced with a series of great opportunities brilliantly disguised as impossible situations.”
― Charles R. Swindoll
How to post questions to get better answers faster
Managing Transaction Logs
May 27, 2011 at 9:57 am
Thanks for the responses. That makes sense Jeffery and I do see those in the logins.
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply