Questions tagged [service-accounts]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
44 views

How does SQL server handle the password change of the service account?

When installing the SQL server, when asked for the sql service account, I have entered a domain user and its password. In future, when the password of the domain account will change, then will I have ...
user avatar
  • 2,452
1 vote
1 answer
86 views

What are the best practises for gMSA with multiple SQL instances on AlwaysON cluster

I have to migrate 8 SQL Server instances to a new SQL Server 2019 AlwaysON cluster. Each instances are going to be replicated to a passive secondary node. We globally want to use gMSA instead of ...
user avatar
  • 283
0 votes
0 answers
180 views

Set SPN Service principle name for SQL Server Service account - Best practice

I am looking for guidance on Microsoft recommended best practice regarding setting the SPN for the service account that runs the SQL Server service (MSSSQLSERVER) When setting up a new server (or ...
user avatar
-1 votes
2 answers
70 views

What Account should SQL service use?

I was recently poking around our SQL Server (2014), and noticed the SQL Service account uses the LOCAL SYSTEM account. Are there any issues with using this account - Pros/Cons? Should we be using ...
user avatar
0 votes
1 answer
27 views

How do I terminate the old connection when a user of the same account login again?

I want to set up a server while multiple users could login at the same time, as long as they are not the "same user". How could I set it up so when the user with the account username "...
user avatar
0 votes
0 answers
35 views

Non-Domain Account Error while Creating Availability Group

I am creating Availability Group with two node cluster. Both servers are using same service account for SQL. But, while creating Availability Group, I getting that the SQL service account is using non-...
user avatar
0 votes
2 answers
317 views

What's the meaning of "resources external to the SQL Server computer are needed" in Microsoft's SQL documentation?

In Microsoft's SQL Server documentation on Windows service account configuration, the decision to use either a VA (virtual account) or a MSA (managed service account) hinges on whether resources ...
user avatar
0 votes
1 answer
829 views

How is the "Adjust memory quotas for a process" user right assignment used in SQL Server 2019?

I am looking at the Configure Windows Service Accounts and Permissions doc (https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/configure-windows-service-accounts-and-permissions?...
user avatar
  • 73
0 votes
0 answers
43 views

Changing domain, can't connect [duplicate]

I have a server that hosts a SQL Server 2017 Entreprise Edition database. I changed domain on the server (e.g. attds.mg in fdsqq.mg). The problem is that I can't connect my application to the database....
user avatar
0 votes
2 answers
247 views

Running queries/jobs via SMSS - SQL service and SQL agent service accounts (SQL Server)

If a command, for example the below command, is executed from SQL Server Management Studio while I am logged in the session with a windows authentication login, I understood that the access to the ...
user avatar
0 votes
1 answer
787 views

SQL server Service Accounts permission

I will be changing the existing SQL Server Service accounts from the default to Domain accounts from the SSCM which i believe will set all the required permission. One thing I am not sure whether the ...
user avatar
  • 1,007
1 vote
1 answer
103 views

Should an account be set up and used solely to install SQL Server?

I'd like to follow best practices. However, is it overkill to create a new service account (with minimal access and no special rights) and then use that account to install SQL Server? Are there ...
user avatar
2 votes
0 answers
32 views

Default Schema not being applied even after setting default schema and default DB

Hello Stack Exchange! I have an interesting problem! Let me set the stage for you: 1) Windows Authentication 2) Default Schema identityiq has been set for the user with login XCORP\USERA 3) ...
user avatar
  • 121
0 votes
1 answer
56 views

SQL Server 2017 Installation Errors

Installing SQL Server 2017 Standard on Windows 2016 and hitting errors when entering the new service accounts for SQL agent, service, SSIS. 'The RPC Service is unavailable, Click retry the failed ...
user avatar
  • 425
4 votes
1 answer
415 views

Refresh SQL Server's service account security group membership

Consider a SQL Server whose service account is a Managed Service Account in Active Directory. When this MSA is added to a security group, this group membership is not immediately going to take effect ...
user avatar
  • 745
1 vote
0 answers
653 views

Is it possible to reset SA password without stopping SQL Server Service?

I lost a password for sa account. Now I want to reset SA password and at the same time not to restart SQL Server Service or going into single-user mode. I would like to mention that I am windows ...
user avatar
  • 1,183
0 votes
1 answer
2k views

SQL Server Service Accounts Max Character Length

I've been considering a new naming convention for all SQL Server service accounts for instances in our enterprise. I ran into some issues on my lab environment. Is there a character limit to SQL ...
user avatar
1 vote
1 answer
169 views

Agent Job Running as Computer Domain Account Rather than Service account

I have two SQL Servers as follows Microsoft SQL Server 2016 (RTM-CU9-GDR) (KB4058559) - 13.0.2218.0 (X64) Dec 27 2017 17:10:01 Copyright (c) Microsoft Corporation Standard Edition (64-bit) on ...
user avatar
  • 1,448
0 votes
2 answers
2k views

Which SQL Server/Windows logins require the sysadmin role?

I'm setting up a new SQL Server instance. Which of these SQL Server/Windows logins should have the sysadmin role? NT AUTHORITY\SYSTEM NT SERVICE\SQLWriter NT SERVICE\Winmgmt NT SERVICE\MSSQLSERVER ...
user avatar
  • 23
2 votes
1 answer
751 views

Unable to backup to a UNC path with a gMSA

I'm trying to automate backups using Ola Hallengren's backup scripts. I'm testing this out on a SQL express instance 2008 R2 (I know it's EOL today). I've setup the jobs and I created a scheduled ...
user avatar
-1 votes
1 answer
39 views

Raid Reconfiguration of SQL Server 2016 Box

I did raid reconfiguration of SQL Server 2016 box. All my systems databases files (mdf and ldf) are in D drive and SQL Server installation also is in D drive and i have them intact. I have lost user ...
user avatar
  • 1,295
2 votes
1 answer
1k views

Does the SQL Server Service Account have to have access to a network share to perform a backup?

I've been provided a specific domain account to handle backups from my sysadmins. I am slightly confused as I've never been provided a separate domain account to handle backups in the past. I still ...
user avatar
4 votes
1 answer
1k views

Availability Group Endpoints Windows Authentication Error

I have a two-node SQL Server 2016 Standard Always-On environment and when I create a new availability group, I receive the error message below: The Endpoints tab lists at least one endpoint that ...
user avatar
  • 540
3 votes
2 answers
556 views

Why SQL Server Service Account connects to the DAC?

We started getting Alerts: Could not connect because the maximum number of '1' dedicated administrator connections already exists. Before a new connection can be made, the existing dedicated ...
user avatar
0 votes
2 answers
321 views

How to find out the service accounts for each of my instances in the current server?

I have the following query that gives me one line for each sql server instance installed in the current server: --list the instances in the current server --marcello miorelli --16-sep-2016 ...
user avatar
1 vote
0 answers
43 views

Restrict Source Access to SQL Server Service Account

I have an Audit requirement to ensure that the service accounts (that connect to SQL Server) are not used by anyone but the by the APPLICATION SERVER itself. All other connections attempts must be ...
user avatar
0 votes
0 answers
46 views

NT SERVICE accounts should be sysadmins? [duplicate]

I have the following query to get me a list of sysadmins in the current server: select 'ServerRole' = SUSER_NAME(rm.role_principal_id), 'MemberName' = lgn.name , 'Status'= Case when ...
user avatar
1 vote
0 answers
705 views

Revert to using local account for SQL Server services

We have changed the login/startup account of our SQL Server service, to use a domain service account. However, we are experiencing issues with this account, and need to revert back to using the local ...
user avatar
  • 535
1 vote
1 answer
3k views

gMSAs and SQL Server 2017

I am setting up a brand new SQL 2017 installation. I want to set up and use gMSA(s) for the Service Accounts. What are the best practices for SQL Server? Should I use individual gMSAs for each service?...
user avatar
  • 67
1 vote
3 answers
13k views

SQL Server Agent Server Login Account

What SQL Server login does the SQL server agent use to log in to the database instance? I am running the SQL server agent as the built in local system account. I have created a SQL agent job which ...
user avatar
  • 1,448
1 vote
1 answer
1k views

Granting permission to the service account

I am currently granting permissions to a service account on a database. I want to ensure if the granting db_datareader and db_datawriter database roles is the same as my grant command. Adding service ...
user avatar
  • 141
0 votes
1 answer
466 views

Sql clustering sql server account

Does both the sql cluster nodes needs to use the same service account ? In my environment I saw one one was using a service account and another was using a local account although the sql agent was ...
user avatar
  • 634
5 votes
2 answers
3k views

SQL query or method to list all sql services running

This might be a simple one, but i searched a lot and unable to find one. Is there a sql query or a way i can run on registered server to find the list of all sql related services running like, ssis , ...
user avatar
  • 2,137
5 votes
2 answers
3k views

SQL Service Using Group Managed Service Account does not start after reboot

We are using group managed service accounts for our SQL Server 2016 servers. For some reason, when we reboot the server, the service does not start and we see this in the event viewer: The ...
user avatar
  • 563
1 vote
1 answer
82 views

Oracle Installation Account

Is there any scenario where it is the best choice to make the Oracle installation/service account (oracle) an LDAP/AD account versus a local-only account? More generally, is creating the Oracle ...
user avatar
  • 123
3 votes
2 answers
910 views

What are points to consider when replacing the SQL Server service account?

In What are the implications of changing the SQL Server Service Logon Account? it mentions that when replacing the SQL Server service account, the service will need to be restarted. But there is more ...
user avatar
0 votes
0 answers
34 views

AD Service Account Changes

Are there any ways that can seamlessly enable the operational continuity of the Application upon a Service Account Password Change at Active Directory Level? Any Ways? Any Tools?
user avatar
0 votes
0 answers
1k views

Why did the "Bypass Traverse Checking" permission fix my issue?

I was having an issue getting SQL Server Reporting Services 2008R2 SP3 working under a domain service account on Windows Server 2008R2. It started with this What am I missing for my SSRS Service ...
user avatar
  • 343
1 vote
2 answers
6k views

What am I missing for my SSRS Service account local server permissions?

I have a relatively new instance on SSRS 2008R2 SP3 running on Windows Server 2008 R2. I am trying to set up separate domain service accounts for the separate SQL Services i.e. agent, engine, ...
user avatar
  • 343
0 votes
1 answer
188 views

Merge Replication: Service Account Password Change

Is it possible to change the password of a SQL Server service account that is used for not only on the publisher server but the 6 subscriber servers as well without seriously affecting merge ...
user avatar
1 vote
2 answers
4k views

SQL Server - login failure every day at same time with the service account

I have dozens of SQL Servers, on many different versions. Many of them have an error in the SQL Server error log EVERY DAY at just about 2 am. Login failed for user 'TheDomain\...
user avatar
  • 1,933
1 vote
2 answers
1k views

Changing startup accounts on alwayson setup

I have a 2 node Always On Availability Group cluster where we are planning to take backups to a file share which will then be moved to Azure cloud. We have a service account from the Windows team for ...
user avatar
1 vote
1 answer
205 views

Sid's for service accounts in alwayson

When creating new maintenance jobs for an alwayson setup with new service accounts, should we ensure that the sid's on both the nodes should be the same? I created a new login with the new domain ...
user avatar
1 vote
2 answers
944 views

SQL Server Service Account Configuration - one account per Server? [duplicate]

Planning to re-create new service accounts for our Sql-Servers, I wondered if - from a security perspective - it maybe better to have one domain account per Service and per Server or to create one ...
user avatar
  • 4,645
7 votes
3 answers
12k views

Find which account SQL Server service is running BACKUP under

Our DBA is out and I'm trying to back up our (remote) dev database to a UNC path. I'm running the back up operation while logged into Management Studio as a particular Windows domain account (e.g. ...
user avatar
8 votes
3 answers
2k views

Single service account running all SQL Servers

Is there any negative performance impact for using the same service account and agent account to run SQL Server and SQL Agent respectively for all SQL server instances running at a small company of ...
user avatar
  • 352
0 votes
1 answer
1k views

Sql service account password change for environment on Availability groups 2012

My current environment is on Availability groups sql 2012 with 1 Synchronous and 1 Asynchronous replica. Soon we need to change the sql service account passwords. Can any one suggest to me do I need ...
user avatar
  • 1
1 vote
1 answer
630 views

should I give dbo permissions to NT AUTHORITY\NETWORK SERVICE?

We're in the process of assessing a new application that will require access to our MSSQL database I've set up a user that is a member of a role only giving it readonly access to certain views in the ...
user avatar
  • 156
4 votes
1 answer
1k views

InfluxDB - How can I limit the measures that a user can read by their tags?

I have some data that is collected by several sensors. Some users may own many of these sensors. I want to keep all the measures in a single database in InfluxDB. To differentiate the sensors I ...
user avatar
1 vote
2 answers
170 views

SQL Service Account creation in AD using PowerShell [closed]

I'm wondering if it's possible to create a service account remotely from the SQL box using PowerShell, and put the service accounts created in the OU (folder) they belong in AD as part of a unattended ...
user avatar
  • 375