Windows Cluster service account privilege on SQL 2005 cluster

Question

Windows Cluster service account privilege on SQL 2005 cluster

tyang

SSCrazy

Points: 2231
More actions
August 31, 2012 at 9:24 am

#266143

Can anyone provide the list of privileges (Local Security policy) which should be granted to Windows Cluster service account? Below is for SQL service account, should it be same for Window cluster service account?
• Act as Part of the Operating System = SeTcbPrivilege
• Bypass Traverse Checking = SeChangeNotify, granted to BUILTIN\Administrators by default
• Lock Pages In Memory = SeLockMemory
• Log on as a Batch Job = SeBatchLogonRight
• Log on as a Service = SeServiceLogonRight
• Replace a Process Level Token = SeAssignPrimaryTokenPrivilege

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply

Perry Whittle SSC Guru Points: 234013 More actions · Answer 1

tyang (8/31/2012)
Can anyone provide the list of privileges (Local Security policy) which should be granted to Windows Cluster service account? Below is for SQL service account, should it be same for Window cluster service account?
• Act as Part of the Operating System = SeTcbPrivilege
• Bypass Traverse Checking = SeChangeNotify, granted to BUILTIN\Administrators by default
• Lock Pages In Memory = SeLockMemory
• Log on as a Batch Job = SeBatchLogonRight
• Log on as a Service = SeServiceLogonRight
• Replace a Process Level Token = SeAssignPrimaryTokenPrivilege

Windows 2003 or Windows 2008 cluster?

-----------------------------------------------------------------------------------------------------------

"Ya can't make an omelette without breaking just a few eggs" 😉

SQL Surfer '66 SSCertifiable Points: 5161 More actions · Answer 2

Are you doing it manually? The installation program should take care of this.

Perry Whittle SSC Guru Points: 234013 More actions · Answer 3

Jan.Sundbye (9/3/2012)
Are you doing it manually? The installation program should take care of this.

The SQL Server installer does not handle the OS permissions of the cluster service account!

-----------------------------------------------------------------------------------------------------------

"Ya can't make an omelette without breaking just a few eggs" 😉

SQL Surfer '66 SSCertifiable Points: 5161 More actions · Answer 4

Perry Whittle (9/3/2012)
Jan.Sundbye (9/3/2012)
Are you doing it manually? The installation program should take care of this.
The SQL Server installer does not handle the OS permissions of the cluster service account!

I was referring to the Windows Cluster installer.