May 3, 2018 at 8:52 am
The link user account will need sysadmin rights. I've always used different accounts for my SQL services and for my link user.
My questions:
1. The question is should we use the service account that's running the SQL services as a link user account or should we create another account and use the new account for a link user account?
2. What are the best practices?
3. Good and bad?
Thanks!
JD
May 3, 2018 at 9:34 am
JD_ctpf - Thursday, May 3, 2018 8:52 AMThe link user account will need sysadmin rights. I've always used different accounts for my SQL services and for my link user.My questions:
1. The question is should we use the service account that's running the SQL services as a link user account or should we create another account and use the new account for a link user account?
2. What are the best practices?
3. Good and bad?Thanks!
JD
Best practice is always use the separate account, Don't compromise the sql service account for linked server setup.
When you use linked server, It will get all data from remote server and apply the filter on local server. So even though you have filter condition it will read all data from source.
Form small table and very frequent use, we can use linked server, if Its for one time or very less time use then go for openquery.
If you use openquery method to access the linked server, then all filtering will be done in remote server. Load will be distributed between local and remote server. But some functionality not supported in openquery.
Read data into some temp table using openquery and use the temp table. This is my recommendation.
May 3, 2018 at 9:51 am
JD_ctpf - Thursday, May 3, 2018 8:52 AMThe link user account will need sysadmin rights. I've always used different accounts for my SQL services and for my link user.My questions:
1. The question is should we use the service account that's running the SQL services as a link user account or should we create another account and use the new account for a link user account?
2. What are the best practices?
3. Good and bad?Thanks!
JD
I'm curious about why the account will to be a sysadmin?
Sue
May 3, 2018 at 9:55 am
Sue_H - Thursday, May 3, 2018 9:51 AMJD_ctpf - Thursday, May 3, 2018 8:52 AMThe link user account will need sysadmin rights. I've always used different accounts for my SQL services and for my link user.My questions:
1. The question is should we use the service account that's running the SQL services as a link user account or should we create another account and use the new account for a link user account?
2. What are the best practices?
3. Good and bad?Thanks!
JDI'm curious about why the account will to be a sysadmin?
Sue
It's for sql monitoring tool.
May 3, 2018 at 10:22 am
JD_ctpf - Thursday, May 3, 2018 9:55 AMSue_H - Thursday, May 3, 2018 9:51 AMJD_ctpf - Thursday, May 3, 2018 8:52 AMThe link user account will need sysadmin rights. I've always used different accounts for my SQL services and for my link user.My questions:
1. The question is should we use the service account that's running the SQL services as a link user account or should we create another account and use the new account for a link user account?
2. What are the best practices?
3. Good and bad?Thanks!
JDI'm curious about why the account will to be a sysadmin?
Sue
It's for sql monitoring tool.
The account the SQL monitoring tool is using should be the the account with admin rights.
And, why can't the monitoring tool be set up to connect directly to the server, as opposed to using a linked server?
One last thing. Do your service accounts have admin rights? They shouldn't
Michael L John
If you assassinate a DBA, would you pull a trigger?
To properly post on a forum:
http://www.sqlservercentral.com/articles/61537/
May 3, 2018 at 11:00 am
JD_ctpf - Thursday, May 3, 2018 9:55 AMSue_H - Thursday, May 3, 2018 9:51 AMJD_ctpf - Thursday, May 3, 2018 8:52 AMThe link user account will need sysadmin rights. I've always used different accounts for my SQL services and for my link user.My questions:
1. The question is should we use the service account that's running the SQL services as a link user account or should we create another account and use the new account for a link user account?
2. What are the best practices?
3. Good and bad?Thanks!
JDI'm curious about why the account will to be a sysadmin?
Sue
It's for sql monitoring tool.
Many actually do not require sysadmin. A couple of them need it for the installation, setup but can be removed afterwards - Solar Winds was like that.
Several others like Red Gates SQL Monitor don't need sysadmin. Red Gate's the documentation list the necessary permissions and what they documented is most likely very similar to what is needed for others.
Permissions - SQL Monitor
Sue
May 3, 2018 at 12:40 pm
Sue_H - Thursday, May 3, 2018 11:00 AMJD_ctpf - Thursday, May 3, 2018 9:55 AMSue_H - Thursday, May 3, 2018 9:51 AMJD_ctpf - Thursday, May 3, 2018 8:52 AMThe link user account will need sysadmin rights. I've always used different accounts for my SQL services and for my link user.My questions:
1. The question is should we use the service account that's running the SQL services as a link user account or should we create another account and use the new account for a link user account?
2. What are the best practices?
3. Good and bad?Thanks!
JDI'm curious about why the account will to be a sysadmin?
Sue
It's for sql monitoring tool.
Many actually do not require sysadmin. A couple of them need it for the installation, setup but can be removed afterwards - Solar Winds was like that.
Several others like Red Gates SQL Monitor don't need sysadmin. Red Gate's the documentation list the necessary permissions and what they documented is most likely very similar to what is needed for others.
Permissions - SQL MonitorSue
Does Idera "SQL Diagnostic Manager" software need sysadmin?
May 3, 2018 at 12:53 pm
Michael L John - Thursday, May 3, 2018 10:22 AMJD_ctpf - Thursday, May 3, 2018 9:55 AMSue_H - Thursday, May 3, 2018 9:51 AMJD_ctpf - Thursday, May 3, 2018 8:52 AMThe link user account will need sysadmin rights. I've always used different accounts for my SQL services and for my link user.My questions:
1. The question is should we use the service account that's running the SQL services as a link user account or should we create another account and use the new account for a link user account?
2. What are the best practices?
3. Good and bad?Thanks!
JDI'm curious about why the account will to be a sysadmin?
Sue
It's for sql monitoring tool.
The account the SQL monitoring tool is using should be the the account with admin rights.
And, why can't the monitoring tool be set up to connect directly to the server, as opposed to using a linked server?
One last thing. Do your service accounts have admin rights? They shouldn't
What do you mean? We're installing the software on a new sql server.
Thanks!
JD
May 3, 2018 at 12:56 pm
JD_ctpf - Thursday, May 3, 2018 12:40 PMSue_H - Thursday, May 3, 2018 11:00 AMJD_ctpf - Thursday, May 3, 2018 9:55 AMSue_H - Thursday, May 3, 2018 9:51 AMJD_ctpf - Thursday, May 3, 2018 8:52 AMThe link user account will need sysadmin rights. I've always used different accounts for my SQL services and for my link user.My questions:
1. The question is should we use the service account that's running the SQL services as a link user account or should we create another account and use the new account for a link user account?
2. What are the best practices?
3. Good and bad?Thanks!
JDI'm curious about why the account will to be a sysadmin?
Sue
It's for sql monitoring tool.
Many actually do not require sysadmin. A couple of them need it for the installation, setup but can be removed afterwards - Solar Winds was like that.
Several others like Red Gates SQL Monitor don't need sysadmin. Red Gate's the documentation list the necessary permissions and what they documented is most likely very similar to what is needed for others.
Permissions - SQL MonitorSue
Does Idera "SQL Diagnostic Manager" software need sysadmin?
I don't remember all of the permissions with all of the different products. Did you ask them? That's what I did if it wasn't in the documentation.
Often they say yes sysadmin and when you tell them the auditors won't allow more sysadmins, they say not necessarily and give the list of permissions. Or they list the permissions in the documentation like Red Gate does.
For those that create repositories of some sort, those were the ones I found that need it just for installation. Don't assume any of them need sysadmin.
Sue
Viewing 9 posts - 1 through 8 (of 8 total)
You must be logged in to reply to this topic. Login to reply