Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

we run all our SQL Services under domain administrator account, our network security policy is such a way that we need to change domain admin password often, one alternative i have is that to create a domain user with admin privileges, is this advisable or should i use admin account only or are there any alternatives with better security. please give your feedback.

Regards Praveen

share|improve this question
    
+5 from developer. Keep going! – Gennady Vanin Геннадий Ванин Aug 13 '10 at 16:25

It's not advisable to run the SQL Services as even a local administrator let alone a domain administrator.

Have a look at this Microsoft document SQL Server 2005 Security Best Practices, in particular the section titled "Service Account Selection and Management". File type warning: the link is a .doc.

share|improve this answer

The easiest way to do it is to specify a domain user during installation. This should grant that account all the privledges it needs.

For reference I think it puts the user in the SQLServerMSSQLUser$ServerName$InstanceName group during installation. The group is located under Local Users and Groups.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.