Clarification on Service accounts

Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

All Forums

SQL Server 2008 Forums

SQL Server Administration (2008)

Clarification on Service accounts

Author

Topic

frank.svs
Constraint Violating Yak Guru

368 Posts

Posted - 2010-02-02 : 02:06:32

Hi,

Need Clarification on the below list of users while specifying the service account.

I would like to know which user(s) comes into picture when am running the SQL Server Service
using

1.NT AUTHORITY\NETWORK SERVICE,
2.NT AUTHORITY\SYSTEM,
3.Domainname\username.

My questions what all are the users who can start and stop sql server if i specify either of the above three?
When will Active dir users comes in picture?
When will Builtin\Administrators comes into pictures ( i.e my local machine users who belong to Admin group) ?

Thank You!

Lumbago
Norsk Yak Master

3271 Posts

Posted - 2010-02-02 : 03:59:19

I think you have these service account users confused...these users are the context under which the sql server/sql server agent can be running and has nothing to do with who has access to start/stop the service itself. Anyone who has admin privileges on the server will be able to start/stop sql server.

- Lumbago
If the facts don't fit the theory, change the facts. Albert Einstein

frank.svs
Constraint Violating Yak Guru

368 Posts

Posted - 2010-02-02 : 08:11:20

Ya Ya...

What u said is right.

But is the significance of

NT AUTHORITY\NETWORK SERVICE
NT AUTHORITY\SYSTEM

Thank You!

Lumbago
Norsk Yak Master

3271 Posts

Posted - 2010-02-02 : 08:20:40

I'm sorry but I can't understand what you're asking...is this a question...? If so can you please rephrase?

- Lumbago
If the facts don't fit the theory, change the facts. Albert Einstein

frank.svs
Constraint Violating Yak Guru

368 Posts

Posted - 2010-02-03 : 08:33:59

Hi,

During sql 2008 install it will ask for configuring the sql service accounts.

http://www.kodyaz.com/photos/sql_server_2008_ctp5_katmai/picture722.aspx

specfiying the user accounts, what all users can start or stop sql server if i specify the below two

NT AUTHORITY\NETWORK SERVICE
NT AUTHORITY\SYSTEM.

Hope you understand what am trying to ask!!

Meaning, I can specify domain\username. right?

But specify the above two what does it mean? Who all can start and stop the sql service?

Thanks

RobertKaucher
Posting Yak Master

169 Posts

Posted - 2010-02-09 : 12:46:02

http://msdn.microsoft.com/en-us/library/ms143504.aspx

Anyone who has administrative rights for the server on which the SQL Server instance is installed will be able to start or stop the services. Are you asking for a way to prevent people from stopping a service on the server? This can be done via GPOs. But you need to understand what happens when a server starts and shuts down before you do this.

Subscribe to SQLTeam.com

SQLTeam.com Articles via RSS

SQLTeam.com Weblog via RSS

- Advertisement -

Resources