Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Direct shot to foot moment...

While setting-up individual non-admin accts for MSSQLSERVER services, I temporarily set Server service login to Local System account.

I remembered later that:

SQL Server Configuration Manager performs additional configuration such as setting permissions in the Windows Registry so that the new account can read the SQL Server settings.

I want my Local System back . (Actually just restored to its original security profile)

Any advice? Thanks!

share|improve this question

2 Answers 2

up vote 0 down vote accepted

SQL SErver 2005/2008 should give those permissions using Windows groups, so if I remember right, all it actually does is switch out the group membership. So when you switch back to your regular service account, all that should be undone. With that said, remember that System has rights as a member of local Administrators group member + additional implicit rights. So nothing you did by switching to System actually gave it more rights than it already could have had.

share|improve this answer
    
That sounds like what I was gathering/hoping from what I've read... Thank you for the reassurance. –  Frank Ramage May 5 '10 at 14:58
    
depends on the OS, local system permissions were locked down better in 2008. –  Jim B May 6 '10 at 5:53

I'm not sure if uninstalling SQL server will rest the perms back to what they were. You can however reset the perms to the defautls by applying the default security template:

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

See this KB article for details

share|improve this answer
    
Thank you for the cmd and KB article... –  Frank Ramage May 5 '10 at 14:57

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.