Windows Cluster service account privilege on SQL 2005 cluster

  • Can anyone provide the list of privileges (Local Security policy) which should be granted to Windows Cluster service account? Below is for SQL service account, should it be same for Window cluster service account?

    • Act as Part of the Operating System = SeTcbPrivilege

    • Bypass Traverse Checking = SeChangeNotify, granted to BUILTIN\Administrators by default

    • Lock Pages In Memory = SeLockMemory

    • Log on as a Batch Job = SeBatchLogonRight

    • Log on as a Service = SeServiceLogonRight

    • Replace a Process Level Token = SeAssignPrimaryTokenPrivilege

  • tyang (8/31/2012)


    Can anyone provide the list of privileges (Local Security policy) which should be granted to Windows Cluster service account? Below is for SQL service account, should it be same for Window cluster service account?

    • Act as Part of the Operating System = SeTcbPrivilege

    • Bypass Traverse Checking = SeChangeNotify, granted to BUILTIN\Administrators by default

    • Lock Pages In Memory = SeLockMemory

    • Log on as a Batch Job = SeBatchLogonRight

    • Log on as a Service = SeServiceLogonRight

    • Replace a Process Level Token = SeAssignPrimaryTokenPrivilege

    Windows 2003 or Windows 2008 cluster?

    -----------------------------------------------------------------------------------------------------------

    "Ya can't make an omelette without breaking just a few eggs" 😉

  • Are you doing it manually? The installation program should take care of this.

  • Jan.Sundbye (9/3/2012)


    Are you doing it manually? The installation program should take care of this.

    The SQL Server installer does not handle the OS permissions of the cluster service account!

    -----------------------------------------------------------------------------------------------------------

    "Ya can't make an omelette without breaking just a few eggs" 😉

  • Perry Whittle (9/3/2012)


    Jan.Sundbye (9/3/2012)


    Are you doing it manually? The installation program should take care of this.

    The SQL Server installer does not handle the OS permissions of the cluster service account!

    I was referring to the Windows Cluster installer.

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply