Questions tagged [service-accounts]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
107 views

Set SPN Service principle name for SQL Server Service account - Best practice

I am looking for guidance on Microsoft recommended best practice regarding setting the SPN for the service account that runs the SQL Server service (MSSSQLSERVER) When setting up a new server (or ...
-1
votes
2answers
53 views

What Account should SQL service use?

I was recently poking around our SQL Server (2014), and noticed the SQL Service account uses the LOCAL SYSTEM account. Are there any issues with using this account - Pros/Cons? Should we be using ...
0
votes
1answer
19 views

How do I terminate the old connection when a user of the same account login again?

I want to set up a server while multiple users could login at the same time, as long as they are not the "same user". How could I set it up so when the user with the account username "...
0
votes
0answers
31 views

Non-Domain Account Error while Creating Availability Group

I am creating Availability Group with two node cluster. Both servers are using same service account for SQL. But, while creating Availability Group, I getting that the SQL service account is using non-...
0
votes
2answers
208 views

What's the meaning of "resources external to the SQL Server computer are needed" in Microsoft's SQL documentation?

In Microsoft's SQL Server documentation on Windows service account configuration, the decision to use either a VA (virtual account) or a MSA (managed service account) hinges on whether resources ...
0
votes
1answer
640 views

How is the "Adjust memory quotas for a process" user right assignment used in SQL Server 2019?

I am looking at the Configure Windows Service Accounts and Permissions doc (https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/configure-windows-service-accounts-and-permissions?...
0
votes
0answers
42 views

Changing domain, can't connect [duplicate]

I have a server that hosts a SQL Server 2017 Entreprise Edition database. I changed domain on the server (e.g. attds.mg in fdsqq.mg). The problem is that I can't connect my application to the database....
0
votes
2answers
174 views

Running queries/jobs via SMSS - SQL service and SQL agent service accounts (SQL Server)

If a command, for example the below command, is executed from SQL Server Management Studio while I am logged in the session with a windows authentication login, I understood that the access to the ...
0
votes
1answer
416 views

SQL server Service Accounts permission

I will be changing the existing SQL Server Service accounts from the default to Domain accounts from the SSCM which i believe will set all the required permission. One thing I am not sure whether the ...
1
vote
1answer
72 views

Should an account be set up and used solely to install SQL Server?

I'd like to follow best practices. However, is it overkill to create a new service account (with minimal access and no special rights) and then use that account to install SQL Server? Are there ...
2
votes
0answers
28 views

Default Schema not being applied even after setting default schema and default DB

Hello Stack Exchange! I have an interesting problem! Let me set the stage for you: 1) Windows Authentication 2) Default Schema identityiq has been set for the user with login XCORP\USERA 3) ...
0
votes
1answer
54 views

SQL Server 2017 Installation Errors

Installing SQL Server 2017 Standard on Windows 2016 and hitting errors when entering the new service accounts for SQL agent, service, SSIS. 'The RPC Service is unavailable, Click retry the failed ...
4
votes
1answer
337 views

Refresh SQL Server's service account security group membership

Consider a SQL Server whose service account is a Managed Service Account in Active Directory. When this MSA is added to a security group, this group membership is not immediately going to take effect ...
1
vote
0answers
580 views

Is it possible to reset SA password without stopping SQL Server Service?

I lost a password for sa account. Now I want to reset SA password and at the same time not to restart SQL Server Service or going into single-user mode. I would like to mention that I am windows ...
0
votes
1answer
1k views

SQL Server Service Accounts Max Character Length

I've been considering a new naming convention for all SQL Server service accounts for instances in our enterprise. I ran into some issues on my lab environment. Is there a character limit to SQL ...
1
vote
1answer
108 views

Agent Job Running as Computer Domain Account Rather than Service account

I have two SQL Servers as follows Microsoft SQL Server 2016 (RTM-CU9-GDR) (KB4058559) - 13.0.2218.0 (X64) Dec 27 2017 17:10:01 Copyright (c) Microsoft Corporation Standard Edition (64-bit) on ...
0
votes
2answers
2k views

Which SQL Server/Windows logins require the sysadmin role?

I'm setting up a new SQL Server instance. Which of these SQL Server/Windows logins should have the sysadmin role? NT AUTHORITY\SYSTEM NT SERVICE\SQLWriter NT SERVICE\Winmgmt NT SERVICE\MSSQLSERVER ...
2
votes
1answer
632 views

Unable to backup to a UNC path with a gMSA

I'm trying to automate backups using Ola Hallengren's backup scripts. I'm testing this out on a SQL express instance 2008 R2 (I know it's EOL today). I've setup the jobs and I created a scheduled ...
-1
votes
1answer
37 views

Raid Reconfiguration of SQL Server 2016 Box

I did raid reconfiguration of SQL Server 2016 box. All my systems databases files (mdf and ldf) are in D drive and SQL Server installation also is in D drive and i have them intact. I have lost user ...
2
votes
1answer
1k views

Does the SQL Server Service Account have to have access to a network share to perform a backup?

I've been provided a specific domain account to handle backups from my sysadmins. I am slightly confused as I've never been provided a separate domain account to handle backups in the past. I still ...
4
votes
1answer
963 views

Availability Group Endpoints Windows Authentication Error

I have a two-node SQL Server 2016 Standard Always-On environment and when I create a new availability group, I receive the error message below: The Endpoints tab lists at least one endpoint that ...
3
votes
2answers
522 views

Why SQL Server Service Account connects to the DAC?

We started getting Alerts: Could not connect because the maximum number of '1' dedicated administrator connections already exists. Before a new connection can be made, the existing dedicated ...
0
votes
2answers
247 views

How to find out the service accounts for each of my instances in the current server?

I have the following query that gives me one line for each sql server instance installed in the current server: --list the instances in the current server --marcello miorelli --16-sep-2016 ...
1
vote
0answers
39 views

Restrict Source Access to SQL Server Service Account

I have an Audit requirement to ensure that the service accounts (that connect to SQL Server) are not used by anyone but the by the APPLICATION SERVER itself. All other connections attempts must be ...
0
votes
0answers
46 views

NT SERVICE accounts should be sysadmins? [duplicate]

I have the following query to get me a list of sysadmins in the current server: select 'ServerRole' = SUSER_NAME(rm.role_principal_id), 'MemberName' = lgn.name , 'Status'= Case when ...
1
vote
0answers
556 views

Revert to using local account for SQL Server services

We have changed the login/startup account of our SQL Server service, to use a domain service account. However, we are experiencing issues with this account, and need to revert back to using the local ...
1
vote
1answer
3k views

gMSAs and SQL Server 2017

I am setting up a brand new SQL 2017 installation. I want to set up and use gMSA(s) for the Service Accounts. What are the best practices for SQL Server? Should I use individual gMSAs for each service?...
1
vote
3answers
13k views

SQL Server Agent Server Login Account

What SQL Server login does the SQL server agent use to log in to the database instance? I am running the SQL server agent as the built in local system account. I have created a SQL agent job which ...
1
vote
1answer
990 views

Granting permission to the service account

I am currently granting permissions to a service account on a database. I want to ensure if the granting db_datareader and db_datawriter database roles is the same as my grant command. Adding service ...
0
votes
1answer
449 views

Sql clustering sql server account

Does both the sql cluster nodes needs to use the same service account ? In my environment I saw one one was using a service account and another was using a local account although the sql agent was ...
4
votes
2answers
3k views

SQL query or method to list all sql services running

This might be a simple one, but i searched a lot and unable to find one. Is there a sql query or a way i can run on registered server to find the list of all sql related services running like, ssis , ...
5
votes
2answers
3k views

SQL Service Using Group Managed Service Account does not start after reboot

We are using group managed service accounts for our SQL Server 2016 servers. For some reason, when we reboot the server, the service does not start and we see this in the event viewer: The ...
1
vote
1answer
78 views

Oracle Installation Account

Is there any scenario where it is the best choice to make the Oracle installation/service account (oracle) an LDAP/AD account versus a local-only account? More generally, is creating the Oracle ...
3
votes
2answers
847 views

What are points to consider when replacing the SQL Server service account?

In What are the implications of changing the SQL Server Service Logon Account? it mentions that when replacing the SQL Server service account, the service will need to be restarted. But there is more ...
0
votes
0answers
32 views

AD Service Account Changes

Are there any ways that can seamlessly enable the operational continuity of the Application upon a Service Account Password Change at Active Directory Level? Any Ways? Any Tools?
0
votes
0answers
956 views

Why did the "Bypass Traverse Checking" permission fix my issue?

I was having an issue getting SQL Server Reporting Services 2008R2 SP3 working under a domain service account on Windows Server 2008R2. It started with this What am I missing for my SSRS Service ...
1
vote
2answers
5k views

What am I missing for my SSRS Service account local server permissions?

I have a relatively new instance on SSRS 2008R2 SP3 running on Windows Server 2008 R2. I am trying to set up separate domain service accounts for the separate SQL Services i.e. agent, engine, ...
0
votes
1answer
169 views

Merge Replication: Service Account Password Change

Is it possible to change the password of a SQL Server service account that is used for not only on the publisher server but the 6 subscriber servers as well without seriously affecting merge ...
1
vote
2answers
3k views

SQL Server - login failure every day at same time with the service account

I have dozens of SQL Servers, on many different versions. Many of them have an error in the SQL Server error log EVERY DAY at just about 2 am. Login failed for user 'TheDomain\...
1
vote
1answer
1k views

Changing startup accounts on alwayson setup

I have a 2 node Always On Availability Group cluster where we are planning to take backups to a file share which will then be moved to Azure cloud. We have a service account from the Windows team for ...
1
vote
1answer
192 views

Sid's for service accounts in alwayson

When creating new maintenance jobs for an alwayson setup with new service accounts, should we ensure that the sid's on both the nodes should be the same? I created a new login with the new domain ...
1
vote
2answers
910 views

SQL Server Service Account Configuration - one account per Server? [duplicate]

Planning to re-create new service accounts for our Sql-Servers, I wondered if - from a security perspective - it maybe better to have one domain account per Service and per Server or to create one ...
7
votes
3answers
12k views

Find which account SQL Server service is running BACKUP under

Our DBA is out and I'm trying to back up our (remote) dev database to a UNC path. I'm running the back up operation while logged into Management Studio as a particular Windows domain account (e.g. ...
8
votes
3answers
2k views

Single service account running all SQL Servers

Is there any negative performance impact for using the same service account and agent account to run SQL Server and SQL Agent respectively for all SQL server instances running at a small company of ...
0
votes
1answer
930 views

Sql service account password change for environment on Availability groups 2012

My current environment is on Availability groups sql 2012 with 1 Synchronous and 1 Asynchronous replica. Soon we need to change the sql service account passwords. Can any one suggest to me do I need ...
0
votes
1answer
589 views

should I give dbo permissions to NT AUTHORITY\NETWORK SERVICE?

We're in the process of assessing a new application that will require access to our MSSQL database I've set up a user that is a member of a role only giving it readonly access to certain views in the ...
4
votes
1answer
1k views

InfluxDB - How can I limit the measures that a user can read by their tags?

I have some data that is collected by several sensors. Some users may own many of these sensors. I want to keep all the measures in a single database in InfluxDB. To differentiate the sensors I ...
1
vote
2answers
155 views

SQL Service Account creation in AD using PowerShell [closed]

I'm wondering if it's possible to create a service account remotely from the SQL box using PowerShell, and put the service accounts created in the OU (folder) they belong in AD as part of a unattended ...
0
votes
1answer
2k views

SQL server Virtual account and folder permissions

How does SQL server 2012 still work after changing the Service account to a domain account or even a local account. For example: as mentioned in MSDN https://msdn.microsoft.com/en-us/library/...
1
vote
2answers
584 views

My Backups Broken

Our SQL server was running with a Domain Admin user for the SQL Service account. Our backups are accomplished with a script: DECLARE @name VARCHAR(50) -- database name DECLARE @path VARCHAR(256) --...