I'm trying to start SQL Server Agent service with domain account that is not part of administrator group. I found this https://docs.microsoft.com/en-us/previous-versions/sql/sql-server-2012/ms143504(v=sql.110). Steps I did:

  1. Granted access in Local Security Policy
    • Log on as a service
    • Replace a process-level token
    • Bypass traverse checking
    • Adjust memory quotas for a process
  2. Granted full control in regedit: HKLM\Software\Microsoft\Microsoft SQL Server
  3. Edited NTFS permissions:
    • Instid\MSSQL\binn
    • Instid\MSSQL\Log
    • 110\com
    • 110\shared
    • 110\shared\Errordumps

I have not just granted NTFS permission on ServerName\EventLog. What folder is it? Do I need to do something else? I can not change log on account from configuration manager because there are not all services are listed, only Browser service.

  • @DavidBrowne-Microsoft, that is not for my case. I just do not want to give admin rights for the account that is used as logon account for agent service – user2522570 May 19 at 17:07
  • There's no need for the Agent Service account to be a Windows Administrator, and the permissions it needs are granted to the per-service SID on installation, so there's no need for you to grant anything to the service account. – David Browne - Microsoft May 19 at 18:40
  • @DavidBrowne-Microsoft, I want to change service account that was specified on installation. And yes I'm doing all this stuff to not grant windows administrator rights – user2522570 May 20 at 3:10
  • 1
    Did you have multiple versions of SQL installed on this server? If so, you very possible have multiple versions of configuration manager as well. Each version of configuration manager will only show the services that are compatible with that version of configuration manager. For example, I have a server that was upgraded to 2017 from 2017. The 2016 configuration manager only shows SSIS because it's still a compatible version (13.0), but the 2017 configuration manager shows all of my services. – GreyOrGray May 20 at 20:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.