SQL server database engine account question

  • Does the account under which the database engine is running ( domain/user1)  need read and write permission on the data and log drive? What is the difference between MSSQLSERVER account and the one created domain/user1 account?

    I have changed the services to run under  domain/user1 account instead of MSSQLSERVER account. 

  • Guras - Tuesday, March 14, 2017 3:53 PM

    Does the account under which the database engine is running ( domain/user1)  need read and write permission on the data and log drive? What is the difference between MSSQLSERVER account and the one created domain/user1 account?

    I have changed the services to run under  domain/user1 account instead of MSSQLSERVER account. 

    If you are managing and changing all of this using Configuration Manager, the permissions will be handled. As its not as straight forward as it seems, it's really best to use that since it is the supported mechanism for managing the accounts.
    For the data/log directories, it needs full control.

    MSSQLSERVER is the virtual account for a default instance if installed with the defaults. 
    Virtual accounts are explained in depth here:
    Configure Windows Service Accounts and Permissions

    domain/user1 is the account you set the service to run with. It's usually the one that is used when process from SQL Server does something outside of it's own local Windows environment. 

    In terms of it not being as straight forward as it may seem, read the post by Rick Byham in this msdn forum where he explains it more: 
    Service/Database Accounts - NT SERVICE\MSSQLSERVER & NT SERVICE\SQLSERVERAGENT … what are they for?

    Sue

  • Guras - Tuesday, March 14, 2017 3:53 PM

    Does the account under which the database engine is running ( domain/user1)  need read and write permission on the data and log drive? What is the difference between MSSQLSERVER account and the one created domain/user1 account?

    I have changed the services to run under  domain/user1 account instead of MSSQLSERVER account. 

    Hi,
    did you change the account in the "SQL Server Configuration Manager", or have you changed the accounts in the "services" tool?
    Best regards,
    Andreas

  • I changed through the configuration manager.

  • Then the necessary permissions were added for the account when the login was changed.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply