Results 1 to 4 of 4
  1. #1
    Join Date
    Oct 2003
    Location
    Bangalore, India
    Posts
    27

    Unhappy Unanswered: SQL Server Services...

    There is a Windows 2000 Server Domain and there are two users. User a and User b.
    Now on machine1 User A is an Administrator and there is SQL Server installed.
    But User B is not an administrator on the machine1.
    I want the SQL Server Service to run under the User B account.
    What all permissions should I give for the User B on machine1.

    Please let me know...

    Thanks,
    Santhosh.C.

  2. #2
    Join Date
    May 2002
    Location
    Sydney
    Posts
    45
    As little as possible, as long as it is picked up as a valid user, and you're able to add the user from an admin account, 'log on as a service' will automatically be given, and you're away.

    J

  3. #3
    Join Date
    Oct 2003
    Location
    Bangalore, India
    Posts
    27

    Angry

    But the problem is that I cannot give the User B as an Administrator on the machine1.
    Without giving the Admin permission on Machine1 how can I make the SQL Service to run under the UserB.

    I have given the below mentioned permissions....
    __________________________________________________ _______________
    Requirements for Domain User Account
    All domain user accounts must have permission to:

    Access and change the SQL Server directory (\Program Files\Microsoft SQL Server\Mssql).


    Access and change the .mdf, .ndf, and .ldf database files.


    Log on as a service.


    Read and write registry keys at and under:
    HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer.
    -or- for any named instance: HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft SQL Server.


    HKEY_LOCAL_MACHINE\System\CurrentControlset\Servic es\MSSQLServer.
    -or- for any named instance: HKEY_LOCAL_MACHINE\System\CurrentControlset\Servic es\MSSQL$Instancename.
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Perflib.

    In addition, a domain user account must be able to read and write corresponding registry keys for these services: SQLAgent$InstanceName, MSSearch, and MSDTC.
    __________________________________________________ _______________

    It still gives error as "Access Denied."


    --Santhosh.C.

  4. #4
    Join Date
    Feb 2004
    Location
    San Antonio, TX
    Posts
    565
    Quote Originally Posted by jimskit
    As little as possible, as long as it is picked up as a valid user, and you're able to add the user from an admin account, 'log on as a service' will automatically be given, and you're away.

    J
    i concur
    make the account a member of the loccal administrator on the sql server machine or a power user

    another suggestion is to create a windows group on the local machine and assign the privs neccesary through the local machine policy.

    you can have a very granular level of cortrol over user privs there .

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •