 2008 local groups, user rights, and service accounts -
10-06-2009
, 01:42 PM
We're installing SQL Server 2008 from the command line. We're using separate
local users for each service account; we create these before running setup.
After setup, certain local users and their SQL Server-created local groups
have the "Log on as a service" right (SeServiceLogonRight):
MsDtsServer
MSSQLSERVER
MSSQLSERVER
ReportServer
SQLServer2005SQLBrowserUser$DTDXSDB01
SQLSERVERAGENT
SQLServerDTSUser$DTDXSDB01
SQLServerReportServerUser$DTDXSDB01$MSRS10.MSSQLSE RVER
SQLServerSQLAgentUser$DTDXSDB01$MSSQLSERVER
They appear in a different order in the console, rather than being
alphabetized as they are in the And MSSQLSERVER does appear twice.
Why would both the user and its group appear in the User Rights Assignment
for "Log on as a service"? Should I much care?
"Bypass traverse checking" has (for SQL Server):
MSSQLSERVER
SQLServerDTSUser$DTDXSDB01
SQLServerSQLAgentUser$DTDXSDB01$MSSQLSERVER
instead of having MSSQLSERVER's group, which seems odd.
MsDtsServer is a member of SQLServerDTSUser$DTDXSDB01.
MSSQLSERVER is a member of SQLServerMSSQLUser$DTDXSDB01$MSSQLSERVER.
ReportServer is a member of
SQLServerReportServerUser$DTDXSDB01$MSRS10.MSSQLSE RVER.
SQLSERVERAGENT is a member of SQLServerSQLAgentUser$DTDXSDB01$MSSQLSERVER.
______
Greg Stigers, MCSE
remember to vote for the answers you like
 |
Linear Mode
