7

'distributor_admin' is a SQL-auth account that is used for replication. Out of the box it is granted sysadmin and currently it looks like that can not be dialed back to db_owner (see related Does distributor_admin need sysadmin? ).

According to some sources (pg4 of PDF) distributor_admin is one of the top eight SQL usernames used in brute force attacks. It is considered a best practice to rename the 'sa' account can the 'distributor_admin'be renamed also?

I looked around and don't find anyone suggesting this alternative. I found a few posts that implied the possibility of the 'distributor_admin' being hard coded into the replication process.

There is not a lot of recent documentation about the distributor_admin account with replication.

10
+200

No it can't be renamed. The good news is that the account only exists on the distributor, which doesn't really contain any user data.

You can safely disable the account when you aren't setting up new replication publishers. If you need to setup a new publisher, enable the account setup the publisher then disable the account again.

It does need to have sysadmin rights. It needs to be able to create linked servers.

  • Just a clarification on the idea of disabling the distributor_admin account. I'd recommend you don't do this if you have remote publishers (i.e. a publisher that is not the same SQL instance as the distributor). In this scenario, distributor_admin is used for administrative type connections coming from the publisher - for example the daily SQL Agent job "Expired subscription clean up" uses it through the linked server "repl_distributor". For the more common local-publisher scenario, disabling distributor_admin is fine - just enable it again when making any changes to the publication. – Mike May 17 '18 at 5:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.