1

I am in the process of scripting existing SQL Server 2008R2 logins for migration to a new server instance.

I see that the existing logins contain the below...

Windows Groups:

[BUILTIN\Administrators]

[BUILTIN\Users]

[BUILTIN\Backup Operators]

Windows Users:

[NT SERVICE\MSSQLSERVER]

[NT SERVICE\SQLSERVERAGENT]

Should these logins be used at all? And do they get created by default on installation?

  • Also these: [##MS_PolicyEventProcessingLogin##], [##MS_PolicyTsqlExecutionLogin##] – K09 Aug 28 '14 at 16:46
1

The following logins will be created on installation. They are containers for the accounts that the SQL Server Database Engine & Agent run under.

 [NT SERVICE\MSSQLSERVER]

 [NT SERVICE\SQLSERVERAGENT]

The other accounts are groups that have been manually added into your SQL instance.

BUILTIN\Administrators was installed by default in SQL Server 2005 but not in SQL Server 2008 R2.

I'd look at the permissions on the existing server to see what accounts are using these groups and then determine if they are needed.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.