November 10, 2017 at 7:53 am
Hello,
I am using an AD domain account for my SQL Services to start up. Right now, they are telling me my account has to have the password reset every 60 days because it has administrative privileges. Do the start up accounts for the SQL Services require admin rights? What would be the minimum rights the start up account would need to function properly?
Thanks!
November 10, 2017 at 8:15 am
No, the SQL Server Service account does not require Admin Privileges, and (in fact) should not.
The permissions a Service Account requires is going to vary from company to company, as everyone has specific needs. As a "bare" minimum it needs access to the folders your data and log files are stored, and where the back ups are stored as well. Likely, however, you're going to need to be able to do other things, such as access shared Network locations (not all of them, but some, you'll know which ones) and send emails. There will likely be other permissions you might need as well (you'll know better than us what your company needs).
Don't forget, as well, that you need to configure the user to be able to be logged in as a Service Account. Not sure if this is allowed implicitly when the user is an admin.
Thom~
Excuse my typos and sometimes awful grammar. My fingers work faster than my brain does.
Larnu.uk
November 10, 2017 at 8:45 am
Groovy, thank you for clarifying!
November 10, 2017 at 8:47 am
amy26 - Friday, November 10, 2017 7:53 AMHello,I am using an AD domain account for my SQL Services to start up. Right now, they are telling me my account has to have the password reset every 60 days because it has administrative privileges. Do the start up accounts for the SQL Services require admin rights? What would be the minimum rights the start up account would need to function properly?
Thanks!
As Thom said, the account used does not need to be in the administrators group. The permissions, rights needed is pretty well documented in this article:
Configure Windows Service Accounts and Permissions
All of the necessary permissions are taken care of if you use SQL Server Configuration Manager for any and all changes with the service accounts. You would really want to depend on that handling the permissions since there are different layers to how that works.
Sue
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply