I recently was asked to bring a new SQL server online. Having no experience with this I of course did quite a bit of research on best practices. The install went without any issues with the exception of the following:

Per:Reference (Many other sources sited the same practice)

I installed MSSQL Server with a domain service accounts for both the agent and db service. Both services start correctly upon boot. I setup alerts and decided to test them. Upon killing the sqlservr.exe through task manager, the agent fails to restart the service.

Reviewing the logs I found this error:

[368] AutoRestart: Unable to restart the MSSQLSERVER service (reason: Access is denied)

Upon failing to restart 3 times, the SQL Agent itself shuts down.

The service users have no admin rights, but from my research SQL 2008 R2 is designed to run least privileged. I'm would really like to avoid giving the agent local admin rights.

I assumed(I know) the SQL installer did some magic to make this work upon install.

The best idea of a solution so far is to modify the SDDL outlined here

Any advise would be appreciated.


SQL Server 2008 R2 Standard MS Win2k8R2 Datacenter SP1


Make sure the user has ownership of the database files themselves.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.