0

I'm new to Brent Ozar's sp_blitz and am trying to do some cleanup in my new job. I get tons of security findings about agent jobs owned by users. Most of these hits are system-type accounts (reportexec, webexec, sqlservice), rather than employee-associated accounts. Is there a problem with this approach? I'd love to reduce the number of hits I'm getting with sp_blitz, but am not sure it's worth changing some of these things that were purposely set up like this. Thanks for any help.

1

You should be fine as sp_blitz will highlight if jobs are owned by users since if their login is disabled or not available due to Active Directory problems, the job will stop working.

you can create your skip table and specify that to the sp_blitz @SkipChecksTable to skip checks.

BTW, sp_blitz is on github and you can view the code as well.

  • Thanks! What is sp_blitz expecting the job ownership to be (where it wouldn't complain) ? – Steve Pearson Apr 2 at 20:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.