In my SQL environments most of the SQL server are running under '.\Local User' with Power user groups rights and some sql servers are running under virtual accounts 'NT Service\MSSQLSERVER'.

I know its best to run SQL service under Domain accounts, but I need to know best compared to Local User '.\Local User' vs Vertual account 'NT Service\MSSQLSERVER'.

closed as off-topic by LowlyDBA, mustaccio, Mr.Brownstone, RDFozz, Tom V Nov 9 '17 at 9:26

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Too localized - this could be because your code has a typo, basic error, or is not relevant to most of our audience. Consider revising your question so that it appeals to a broader audience. As it stands, the question is unlikely to help other users (regarding typo questions, see this meta question for background)." – LowlyDBA, Mr.Brownstone, RDFozz
If this question can be reworded to fit the rules in the help center, please edit the question.


The MSDN Page Configure Windows Service Accounts and Permissions has some detailed recommendations for the SQL Server 2014 service accounts.

The subheading for configuring the services is at Service Permissions

This is quite a detailed outline of recommendations for the SQL Server Service Accounts. These are good recommendations, however you can make your own decisions on configuration, based on your needs for security and for being able to manage the configuration.

Truth in reading: Although we use many of these settings, we also have some variations that suit us.

Not the answer you're looking for? Browse other questions tagged or ask your own question.