SSW Foursquare

​DBAs - Do you configure all your SQL Server Services to use a Domain Account rather than a local service account?

Last updated by ChristianMWaite over 4 years ago.See history

Depending on which components you decide to install on your SQL Server, you may need to configure the following services:

  • SQL Server
  • SQL Server Agent
  • SQL Server Reporting Services
  • SQL Server Integration Services
  • SQL Server Fulltext search
  • SQL Server Analysis Services

In the service properties window for these services, ensure that the Service Startup Account is run as "This Account" and not as "Built-in Account". Otherwise, you won't get all the functionality by default such as the ability to use Replication, Linked Servers or connect to other machines.

For security, you should not have this domain account in the Administrators group.

SQLDatabases RunAsAccount Bad
Figure: Bad example - This service is using a built-in local service account

SQLDatabases RunAsAccount
Figure: Good example - Run as Account should use a domain account rather than a built-in account

Adam Cogan
SQL Databases - Admin
We open source. Powered by GitHub