Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

we run all our SQL Services under domain administrator account, our network security policy is such a way that we need to change domain admin password often, one alternative i have is that to create a domain user with admin privileges, is this advisable or should i use admin account only or are there any alternatives with better security. please give your feedback.

Regards Praveen

share|improve this question
    
+5 from developer. Keep going! –  Gennady Vanin Novosibirsk Aug 13 '10 at 16:25
add comment

2 Answers

It's not advisable to run the SQL Services as even a local administrator let alone a domain administrator.

Have a look at this Microsoft document SQL Server 2005 Security Best Practices, in particular the section titled "Service Account Selection and Management". File type warning: the link is a .doc.

share|improve this answer
add comment

The easiest way to do it is to specify a domain user during installation. This should grant that account all the privledges it needs.

For reference I think it puts the user in the SQLServerMSSQLUser$ServerName$InstanceName group during installation. The group is located under Local Users and Groups.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.