Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm trying to setup a 2-tier server environment in Windows Server 2008, which I'm finding is a little different from XP or Server 2003. The web tier is using IIS and ASP.NET 3.5 and the database tier is using SQL Server 2008. The only services that I'm using there is the database engine, Integration services, and Reporting services.

What user account should the various Windows services be running as? Are there any other settings that I should be aware of when setting this up?

share|improve this question

migrated from stackoverflow.com Aug 19 '09 at 14:29

This question came from our site for professional and enthusiast programmers.

2 Answers 2

Applications should always run at the lowest possible security level.

Additionally -- when you install your application on top of ASP.net and SQL Server, do not use the SA, or Administrator accounts. Your application should have its own restricted login and restricted SQL user.

share|improve this answer
    
Great recommended docs, we follow these best practices in our environment. –  Kai Aug 19 '09 at 17:00

I've got a SQL Server setup checklist that covers a lot of best practices to get more security & performance out of your install:

http://www.brentozar.com/archive/2008/03/sql-server-2005-setup-checklist-part-1-before-the-install/

It's good for any version of Windows, and for SQL Server 2005 and newer.

share|improve this answer
    
+1 Brent - that's an excellent guide. I've also got to go and revise another answer of mine on the back of your fairly strong argument in favour of large pagefiles. –  Helvick Feb 11 '10 at 20:16
    
Thanks, glad you liked it! –  Brent Ozar Feb 19 '10 at 0:24

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.