Contents
Does SQL service account need local admin?
Using a local user or domain user that is not a Windows administrator is the best choice. If the server is not part of a domain, a local user that is not a Windows administrator is preferred. The SQL Server Agent service account requires sysadmin privileges in the SQL Server instance that it is associated with.
How do I give Windows permissions to a service account?
Right click, choose properties from the menu and select the service tab. Press the permissions button and open the advanced settings. You can grant the various permissions to every User or Group.
How do I set permissions on a service?
To configure permissions for a new user or group, click Add. In the Select Users, Computers, or Groups dialog box, type the name of the user or group that you want to set permissions for, and then click OK. In the Permissions for User or Group list, configure the permissions that you want for the user or group.
Why do I have super user privileges in SQL Server?
Being a member of the Administrator group, grants the account super-user privileges which therefore may expose you to more security vulnerabilities. By limiting access for the service accounts it will help you safeguard your system if individual services or processes are compromised.
Do you need sysadmin privileges for SQL Server?
If the server is not part of a domain, a local user that is not a Windows administrator is preferred. The SQL Server Agent service account requires sysadmin privileges in the SQL Server instance that it is associated with.
SQL Server 2005 Books Online indicates that the SQL Server service account requires permission to start the following related services (among many other requirements): SQL Server Active Directory Helper and SQL Server VSS Writer services. How can I verify service-related permissions for the SQL Server service account?
What are the rights of a SQL Server account?
The account that is running SQL Server Setup does not have one or all of the following rights: the right to back up files and directories, the right to manage auditing and the security log and the right to debug programs.