2005 cluster install - domain groups

#1

In the first runs of installing SQL Server 2005 on a cluster, we needed to
use domain groups for each service as part of the install. It was something
you couldn't get past.

I have been looking for the article that refers to this and it appears to no
longer exist.
--------------------
You must specify the domain groups for the clustered SQL Server services
when you install a SQL Server 2005 failover cluster
http://support.microsoft.com/kb/910708
---------------------

Is this still a requirement for a cluster install?

thanks,
frankm

#2

Yes, this is still requirement. Domain groups allow permissions to be set
consistently across all cluster nodes while allowing for future service
account changes.

Do not use any built-in domain groups for this, ESPECIALLY Domain Admins.
Create new groups (you can use only one for all three, but it is not best
security practices) and let the cluster installer do its magic.

--
Geoff N. Hiten
Senior SQL Infrastructure Consultant
Microsoft SQL Server MVP

"frankm" <frankm (AT) nospam (DOT) postalias> wrote

Quote:

In the first runs of installing SQL Server 2005 on a cluster, we needed to
use domain groups for each service as part of the install. It was
something
you couldn't get past.

I have been looking for the article that refers to this and it appears to
no
longer exist.
--------------------
You must specify the domain groups for the clustered SQL Server services
when you install a SQL Server 2005 failover cluster
http://support.microsoft.com/kb/910708
---------------------

Is this still a requirement for a cluster install?

thanks,
frankm

#3

Yes, this is still requirement. Domain groups allow permissions to be set
consistently across all cluster nodes while allowing for future service
account changes.

Do not use any built-in domain groups for this, ESPECIALLY Domain Admins.
Create new groups (you can use only one for all three, but it is not best
security practices) and let the cluster installer do its magic.

--
Geoff N. Hiten
Senior SQL Infrastructure Consultant
Microsoft SQL Server MVP

"frankm" <frankm (AT) nospam (DOT) postalias> wrote

Quote:

In the first runs of installing SQL Server 2005 on a cluster, we needed to
use domain groups for each service as part of the install. It was
something
you couldn't get past.

I have been looking for the article that refers to this and it appears to
no
longer exist.
--------------------
You must specify the domain groups for the clustered SQL Server services
when you install a SQL Server 2005 failover cluster
http://support.microsoft.com/kb/910708
---------------------

Is this still a requirement for a cluster install?

thanks,
frankm

#4

Yes, this is still requirement. Domain groups allow permissions to be set
consistently across all cluster nodes while allowing for future service
account changes.

Do not use any built-in domain groups for this, ESPECIALLY Domain Admins.
Create new groups (you can use only one for all three, but it is not best
security practices) and let the cluster installer do its magic.

--
Geoff N. Hiten
Senior SQL Infrastructure Consultant
Microsoft SQL Server MVP

"frankm" <frankm (AT) nospam (DOT) postalias> wrote

Quote:

In the first runs of installing SQL Server 2005 on a cluster, we needed to
use domain groups for each service as part of the install. It was
something
you couldn't get past.

I have been looking for the article that refers to this and it appears to
no
longer exist.
--------------------
You must specify the domain groups for the clustered SQL Server services
when you install a SQL Server 2005 failover cluster
http://support.microsoft.com/kb/910708
---------------------

Is this still a requirement for a cluster install?

thanks,
frankm

#5

Yes, this is still requirement. Domain groups allow permissions to be set
consistently across all cluster nodes while allowing for future service
account changes.

Do not use any built-in domain groups for this, ESPECIALLY Domain Admins.
Create new groups (you can use only one for all three, but it is not best
security practices) and let the cluster installer do its magic.

--
Geoff N. Hiten
Senior SQL Infrastructure Consultant
Microsoft SQL Server MVP

"frankm" <frankm (AT) nospam (DOT) postalias> wrote

Quote:

In the first runs of installing SQL Server 2005 on a cluster, we needed to
use domain groups for each service as part of the install. It was
something
you couldn't get past.

I have been looking for the article that refers to this and it appears to
no
longer exist.
--------------------
You must specify the domain groups for the clustered SQL Server services
when you install a SQL Server 2005 failover cluster
http://support.microsoft.com/kb/910708
---------------------

Is this still a requirement for a cluster install?

thanks,
frankm

#6

Yes, this is still requirement. Domain groups allow permissions to be set
consistently across all cluster nodes while allowing for future service
account changes.

Do not use any built-in domain groups for this, ESPECIALLY Domain Admins.
Create new groups (you can use only one for all three, but it is not best
security practices) and let the cluster installer do its magic.

--
Geoff N. Hiten
Senior SQL Infrastructure Consultant
Microsoft SQL Server MVP

"frankm" <frankm (AT) nospam (DOT) postalias> wrote

Quote:

In the first runs of installing SQL Server 2005 on a cluster, we needed to
use domain groups for each service as part of the install. It was
something
you couldn't get past.

I have been looking for the article that refers to this and it appears to
no
longer exist.
--------------------
You must specify the domain groups for the clustered SQL Server services
when you install a SQL Server 2005 failover cluster
http://support.microsoft.com/kb/910708
---------------------

Is this still a requirement for a cluster install?

thanks,
frankm

#7

Yes, this is still requirement. Domain groups allow permissions to be set
consistently across all cluster nodes while allowing for future service
account changes.

Do not use any built-in domain groups for this, ESPECIALLY Domain Admins.
Create new groups (you can use only one for all three, but it is not best
security practices) and let the cluster installer do its magic.

--
Geoff N. Hiten
Senior SQL Infrastructure Consultant
Microsoft SQL Server MVP

"frankm" <frankm (AT) nospam (DOT) postalias> wrote

Quote:

In the first runs of installing SQL Server 2005 on a cluster, we needed to
use domain groups for each service as part of the install. It was
something
you couldn't get past.

I have been looking for the article that refers to this and it appears to
no
longer exist.
--------------------
You must specify the domain groups for the clustered SQL Server services
when you install a SQL Server 2005 failover cluster
http://support.microsoft.com/kb/910708
---------------------

Is this still a requirement for a cluster install?

thanks,
frankm

#8

Yes, this is still requirement. Domain groups allow permissions to be set
consistently across all cluster nodes while allowing for future service
account changes.

Do not use any built-in domain groups for this, ESPECIALLY Domain Admins.
Create new groups (you can use only one for all three, but it is not best
security practices) and let the cluster installer do its magic.

--
Geoff N. Hiten
Senior SQL Infrastructure Consultant
Microsoft SQL Server MVP

"frankm" <frankm (AT) nospam (DOT) postalias> wrote

Quote:

In the first runs of installing SQL Server 2005 on a cluster, we needed to
use domain groups for each service as part of the install. It was
something
you couldn't get past.

I have been looking for the article that refers to this and it appears to
no
longer exist.
--------------------
You must specify the domain groups for the clustered SQL Server services
when you install a SQL Server 2005 failover cluster
http://support.microsoft.com/kb/910708
---------------------

Is this still a requirement for a cluster install?

thanks,
frankm

#9

Yes, this is still requirement. Domain groups allow permissions to be set
consistently across all cluster nodes while allowing for future service
account changes.

Do not use any built-in domain groups for this, ESPECIALLY Domain Admins.
Create new groups (you can use only one for all three, but it is not best
security practices) and let the cluster installer do its magic.

--
Geoff N. Hiten
Senior SQL Infrastructure Consultant
Microsoft SQL Server MVP

"frankm" <frankm (AT) nospam (DOT) postalias> wrote

Quote:

In the first runs of installing SQL Server 2005 on a cluster, we needed to
use domain groups for each service as part of the install. It was
something
you couldn't get past.

I have been looking for the article that refers to this and it appears to
no
longer exist.
--------------------
You must specify the domain groups for the clustered SQL Server services
when you install a SQL Server 2005 failover cluster
http://support.microsoft.com/kb/910708
---------------------

Is this still a requirement for a cluster install?

thanks,
frankm

#10

Yes, this is still requirement. Domain groups allow permissions to be set
consistently across all cluster nodes while allowing for future service
account changes.

Do not use any built-in domain groups for this, ESPECIALLY Domain Admins.
Create new groups (you can use only one for all three, but it is not best
security practices) and let the cluster installer do its magic.

--
Geoff N. Hiten
Senior SQL Infrastructure Consultant
Microsoft SQL Server MVP

"frankm" <frankm (AT) nospam (DOT) postalias> wrote

Quote:

In the first runs of installing SQL Server 2005 on a cluster, we needed to
use domain groups for each service as part of the install. It was
something
you couldn't get past.

I have been looking for the article that refers to this and it appears to
no
longer exist.
--------------------
You must specify the domain groups for the clustered SQL Server services
when you install a SQL Server 2005 failover cluster
http://support.microsoft.com/kb/910708
---------------------

Is this still a requirement for a cluster install?

thanks,
frankm