Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm a newbie in SSRS, so my experiences are limited in this topic. In the SQL Server Configuration Manager, there are several options to set the Service Account. I have the option to either use a built-in account or another account. The dropdown menu gives me the following four options:

  • Local System
  • Network Service
  • ReportServer$SQLEXPRESS
  • Local Service

Now I'm a bit confused which entry should I use and what their purpose is. Could you point me to a resource where this "concept" is described? In which situation should I use which one? When should I use "Use another account"?

share|improve this question
up vote 3 down vote accepted

I use the principle of least privilege when setting up services and create a specific account for each service. If you are going to use built-in accounts, which one you should select depends if you are using Active Directory or not. If the server is in an AD Domain, you should use Network. Otherwise, I'd suggest Local System.

But my first choice would be to create a specific service account in active directory for the service.

share|improve this answer
Creating a specific service account is the right answer. Additionally, life is good when your service accounts follow a consistent naming convention. Example: username svc_ssrs, first name SQL Server Reporting, last name Service. – Skyhawk May 2 '12 at 4:09
That's how I do it...and I put them in their own OU as well. – Michael Brown May 2 '12 at 12:25
LocalSystem..."dangerous, don't use" according to this link:… – Ronnie Mar 3 at 16:31

My answer is Use AD account as services accounts will not face any connectivity issuses etc.

share|improve this answer
If you mean use the Administrator account, that's not a good choice from a security perspective. If you mean use an Active Directory account, you need to be more specific. – Skyhawk May 2 '12 at 4:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.