Skip to main content

Questions tagged [service-accounts]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
62 views

How do I change the service accounts multiple SQL services run under, using PowerShell, and preserve dependencies?

I am in the process of converting all of our user-based service accounts on all MSSQL servers to gMSA and I have used PowerShell to script most of the required changes. I have hit a rather large ...
Dana H's user avatar
  • 1
-1 votes
1 answer
68 views

What context does the agent service account use (logon account or the NT SERVICE\SQLSERVERAGENT)?

My SQL server agent service account is running under the following domain user account: mydomain\svc_svr1_sql_agent I have a ssis package that must be able to read/write files in a folder. The ssis ...
variable's user avatar
  • 3,476
1 vote
1 answer
109 views

What are the post steps after changing SQL engine and agent accounts?

In a default SQL installation the engine account is NT Service\MSSQLSERVER, and agent account is NT Service\SQLSERVERAGENT In SQL security I can see them both listed as logins with sysadmin role. ...
variable's user avatar
  • 3,476
0 votes
0 answers
23 views

Service Accounts in SQL Server

I wanted to get a list of all the service accounts available in Microsoft SQL Server, I was able to see through Configuration Manager, and also by running this query in SSMS "select servicename, ...
Nancy Okolo's user avatar
1 vote
0 answers
29 views

SSRS not using MSA or gMSA account on Domain [duplicate]

I am trying to install SSRS on a new server to report on our new database server and want to use a MSA account on our domain (server is on our domain) but I keep getting errors when trying to start ...
Nik's user avatar
  • 11
2 votes
1 answer
164 views

Securing Functional/Service ID for MSSQL with Windows Authentication

I'm currently assessing a setup of Data warehouse implementation in our environment, based on the requirements: A functional/service ID to be setup to access multiple DB servers of other applications ...
nlks's user avatar
  • 21
0 votes
0 answers
425 views

Exception during GRANT CONNECT ON ENDPOINT to group managed service account

Did somebody happen to make a GRANT CONNECT ON ENDPOINT:: operation to a group managed service account work? Personally, I can't. I am always facing the so-called self-explaining exception: Msg 15151, ...
tivivi's user avatar
  • 41
0 votes
1 answer
1k views

SQL Service Account group policy permissions

I'm trying to establish the best practice standards for configuring service account permissions in Group Policy. Based on Microsoft documentation, SQL Server setup requests permissions for the per-...
steve's user avatar
  • 47
0 votes
1 answer
1k views

How does SQL server handle the password change of the service account?

When installing the SQL server, when asked for the sql service account, I have entered a domain user and its password. In future, when the password of the domain account will change, then will I have ...
variable's user avatar
  • 3,476
1 vote
1 answer
731 views

What are the best practises for gMSA with multiple SQL instances on AlwaysON cluster

I have to migrate 8 SQL Server instances to a new SQL Server 2019 AlwaysON cluster. Each instances are going to be replicated to a passive secondary node. We globally want to use gMSA instead of ...
Mickael's user avatar
  • 325
0 votes
0 answers
643 views

Set SPN Service principle name for SQL Server Service account - Best practice

I am looking for guidance on Microsoft recommended best practice regarding setting the SPN for the service account that runs the SQL Server service (MSSSQLSERVER) When setting up a new server (or ...
joemcbdc's user avatar
0 votes
2 answers
1k views

What Account should SQL service use?

I was recently poking around our SQL Server (2014), and noticed the SQL Service account uses the LOCAL SYSTEM account. Are there any issues with using this account - Pros/Cons? Should we be using ...
Depth of Field's user avatar
0 votes
1 answer
59 views

How do I terminate the old connection when a user of the same account login again?

I want to set up a server while multiple users could login at the same time, as long as they are not the "same user". How could I set it up so when the user with the account username "...
PiggyChu001's user avatar
0 votes
2 answers
787 views

What's the meaning of "resources external to the SQL Server computer are needed" in Microsoft's SQL documentation?

In Microsoft's SQL Server documentation on Windows service account configuration, the decision to use either a VA (virtual account) or a MSA (managed service account) hinges on whether resources ...
Stuart J Cuthbertson's user avatar
0 votes
1 answer
2k views

How is the "Adjust memory quotas for a process" user right assignment used in SQL Server 2019?

I am looking at the Configure Windows Service Accounts and Permissions doc (https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/configure-windows-service-accounts-and-permissions?...
zapcon's user avatar
  • 73
0 votes
0 answers
46 views

Changing domain, can't connect [duplicate]

I have a server that hosts a SQL Server 2017 Entreprise Edition database. I changed domain on the server (e.g. attds.mg in fdsqq.mg). The problem is that I can't connect my application to the database....
Lucas Rasolofoniaina's user avatar
0 votes
2 answers
695 views

Running queries/jobs via SMSS - SQL service and SQL agent service accounts (SQL Server)

If a command, for example the below command, is executed from SQL Server Management Studio while I am logged in the session with a windows authentication login, I understood that the access to the ...
user1930901's user avatar
0 votes
1 answer
2k views

SQL server Service Accounts permission

I will be changing the existing SQL Server Service accounts from the default to Domain accounts from the SSCM which i believe will set all the required permission. One thing I am not sure whether the ...
SQL_NoExpert's user avatar
  • 1,061
1 vote
1 answer
324 views

Should an account be set up and used solely to install SQL Server?

I'd like to follow best practices. However, is it overkill to create a new service account (with minimal access and no special rights) and then use that account to install SQL Server? Are there ...
LeSteelBox's user avatar
2 votes
0 answers
76 views

Default Schema not being applied even after setting default schema and default DB

Hello Stack Exchange! I have an interesting problem! Let me set the stage for you: 1) Windows Authentication 2) Default Schema identityiq has been set for the user with login XCORP\USERA 3) ...
Bob's user avatar
  • 121
0 votes
1 answer
101 views

SQL Server 2017 Installation Errors

Installing SQL Server 2017 Standard on Windows 2016 and hitting errors when entering the new service accounts for SQL agent, service, SSIS. 'The RPC Service is unavailable, Click retry the failed ...
Stockburn's user avatar
  • 431
4 votes
1 answer
785 views

Refresh SQL Server's service account security group membership

Consider a SQL Server whose service account is a Managed Service Account in Active Directory. When this MSA is added to a security group, this group membership is not immediately going to take effect ...
NReilingh's user avatar
  • 785
1 vote
0 answers
918 views

Is it possible to reset SA password without stopping SQL Server Service?

I lost a password for sa account. Now I want to reset SA password and at the same time not to restart SQL Server Service or going into single-user mode. I would like to mention that I am windows ...
Rauf Asadov's user avatar
  • 1,293
0 votes
1 answer
3k views

SQL Server Service Accounts Max Character Length

I've been considering a new naming convention for all SQL Server service accounts for instances in our enterprise. I ran into some issues on my lab environment. Is there a character limit to SQL ...
Dennis Peterson's user avatar
1 vote
1 answer
493 views

Agent Job Running as Computer Domain Account Rather than Service account

I have two SQL Servers as follows Microsoft SQL Server 2016 (RTM-CU9-GDR) (KB4058559) - 13.0.2218.0 (X64) Dec 27 2017 17:10:01 Copyright (c) Microsoft Corporation Standard Edition (64-bit) on ...
SE1986's user avatar
  • 2,000
0 votes
2 answers
4k views

Which SQL Server/Windows logins require the sysadmin role?

I'm setting up a new SQL Server instance. Which of these SQL Server/Windows logins should have the sysadmin role? NT AUTHORITY\SYSTEM NT SERVICE\SQLWriter NT SERVICE\Winmgmt NT SERVICE\MSSQLSERVER ...
td48260's user avatar
  • 65
2 votes
1 answer
1k views

Unable to backup to a UNC path with a gMSA

I'm trying to automate backups using Ola Hallengren's backup scripts. I'm testing this out on a SQL express instance 2008 R2 (I know it's EOL today). I've setup the jobs and I created a scheduled ...
PJRap986's user avatar
-1 votes
1 answer
40 views

Raid Reconfiguration of SQL Server 2016 Box

I did raid reconfiguration of SQL Server 2016 box. All my systems databases files (mdf and ldf) are in D drive and SQL Server installation also is in D drive and i have them intact. I have lost user ...
user9516827's user avatar
  • 1,315
2 votes
1 answer
2k views

Does the SQL Server Service Account have to have access to a network share to perform a backup?

I've been provided a specific domain account to handle backups from my sysadmins. I am slightly confused as I've never been provided a separate domain account to handle backups in the past. I still ...
Eric Swiggum's user avatar
4 votes
1 answer
2k views

Availability Group Endpoints Windows Authentication Error

I have a two-node SQL Server 2016 Standard Always-On environment and when I create a new availability group, I receive the error message below: The Endpoints tab lists at least one endpoint that ...
WadeH's user avatar
  • 540
3 votes
2 answers
783 views

Why SQL Server Service Account connects to the DAC?

We started getting Alerts: Could not connect because the maximum number of '1' dedicated administrator connections already exists. Before a new connection can be made, the existing dedicated ...
VitalicJJ's user avatar
0 votes
2 answers
834 views

How to find out the service accounts for each of my instances in the current server?

I have the following query that gives me one line for each sql server instance installed in the current server: --list the instances in the current server --marcello miorelli --16-sep-2016 ...
Marcello Miorelli's user avatar
1 vote
0 answers
68 views

Restrict Source Access to SQL Server Service Account

I have an Audit requirement to ensure that the service accounts (that connect to SQL Server) are not used by anyone but the by the APPLICATION SERVER itself. All other connections attempts must be ...
Ricardo Cardoso's user avatar
0 votes
0 answers
48 views

NT SERVICE accounts should be sysadmins? [duplicate]

I have the following query to get me a list of sysadmins in the current server: select 'ServerRole' = SUSER_NAME(rm.role_principal_id), 'MemberName' = lgn.name , 'Status'= Case when ...
Marcello Miorelli's user avatar
1 vote
0 answers
1k views

Revert to using local account for SQL Server services

We have changed the login/startup account of our SQL Server service, to use a domain service account. However, we are experiencing issues with this account, and need to revert back to using the local ...
user3399498's user avatar
1 vote
1 answer
3k views

gMSAs and SQL Server 2017

I am setting up a brand new SQL 2017 installation. I want to set up and use gMSA(s) for the Service Accounts. What are the best practices for SQL Server? Should I use individual gMSAs for each service?...
ivGeo's user avatar
  • 67
2 votes
3 answers
16k views

SQL Server Agent Server Login Account

What SQL Server login does the SQL server agent use to log in to the database instance? I am running the SQL server agent as the built in local system account. I have created a SQL agent job which ...
SE1986's user avatar
  • 2,000
1 vote
1 answer
2k views

Granting permission to the service account

I am currently granting permissions to a service account on a database. I want to ensure if the granting db_datareader and db_datawriter database roles is the same as my grant command. Adding service ...
Tom's user avatar
  • 141
0 votes
1 answer
615 views

Sql clustering sql server account

Does both the sql cluster nodes needs to use the same service account ? In my environment I saw one one was using a service account and another was using a local account although the sql agent was ...
SqlNovice's user avatar
  • 644
5 votes
2 answers
4k views

SQL query or method to list all sql services running

This might be a simple one, but i searched a lot and unable to find one. Is there a sql query or a way i can run on registered server to find the list of all sql related services running like, ssis , ...
BeginnerDBA's user avatar
  • 2,180
6 votes
2 answers
5k views

SQL Service Using Group Managed Service Account does not start after reboot

We are using group managed service accounts for our SQL Server 2016 servers. For some reason, when we reboot the server, the service does not start and we see this in the event viewer: The ...
kaitlyn's user avatar
  • 583
1 vote
1 answer
103 views

Oracle Installation Account

Is there any scenario where it is the best choice to make the Oracle installation/service account (oracle) an LDAP/AD account versus a local-only account? More generally, is creating the Oracle ...
LJKims's user avatar
  • 123
3 votes
2 answers
1k views

What are points to consider when replacing the SQL Server service account?

In What are the implications of changing the SQL Server Service Logon Account? it mentions that when replacing the SQL Server service account, the service will need to be restarted. But there is more ...
Marcello Miorelli's user avatar
0 votes
0 answers
1k views

Why did the "Bypass Traverse Checking" permission fix my issue?

I was having an issue getting SQL Server Reporting Services 2008R2 SP3 working under a domain service account on Windows Server 2008R2. It started with this What am I missing for my SSRS Service ...
Matt's user avatar
  • 365
1 vote
2 answers
9k views

What am I missing for my SSRS Service account local server permissions?

I have a relatively new instance on SSRS 2008R2 SP3 running on Windows Server 2008 R2. I am trying to set up separate domain service accounts for the separate SQL Services i.e. agent, engine, ...
Matt's user avatar
  • 365
0 votes
1 answer
284 views

Merge Replication: Service Account Password Change

Is it possible to change the password of a SQL Server service account that is used for not only on the publisher server but the 6 subscriber servers as well without seriously affecting merge ...
SQL_Deadwood's user avatar
1 vote
2 answers
6k views

SQL Server - login failure every day at same time with the service account

I have dozens of SQL Servers, on many different versions. Many of them have an error in the SQL Server error log EVERY DAY at just about 2 am. Login failed for user 'TheDomain\...
SomeGuy's user avatar
  • 2,013
1 vote
2 answers
2k views

Changing startup accounts on alwayson setup

I have a 2 node Always On Availability Group cluster where we are planning to take backups to a file share which will then be moved to Azure cloud. We have a service account from the Windows team for ...
buddinggeek's user avatar
1 vote
1 answer
246 views

Sid's for service accounts in alwayson

When creating new maintenance jobs for an alwayson setup with new service accounts, should we ensure that the sid's on both the nodes should be the same? I created a new login with the new domain ...
buddinggeek's user avatar
1 vote
2 answers
981 views

SQL Server Service Account Configuration - one account per Server? [duplicate]

Planning to re-create new service accounts for our Sql-Servers, I wondered if - from a security perspective - it maybe better to have one domain account per Service and per Server or to create one ...
Magier's user avatar
  • 4,797