1

I am looking at decommissioning a service account (windows account).

Before that I want to ensure that there are no dependencies on this account from any sql server areas. I have already checked under:

  1. Security/logins
  2. Database and agent job service accounts
  3. Job owners
  4. Package owners
  5. Credentials/Proxy

What other places need checking?

1
  • I would start with above list, lock the account and see the impact. Dec 15, 2021 at 14:18

1 Answer 1

0

The list you've given seems good.

You should also check about database owners and schema owners, but since you have checked logins I assume you have also checked database users linked to those logins.

Here is a way to change database owners :

Exec sp_changedbowner [user_name]

Here is a way to change schema owner :

ALTER AUTHORIZATION ON SCHEMA::db_owner TO db_owner;

You could also check job proxies and credentials.

Credentials are another way to authenticate on a given principal by the use of proxies, so this might be an impact if they are used in a job.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.