Failover cluster and global groups

  • I'm working through my first failover cluster install for SQL 2012, previously you had to put the service accounts into AD groups and specify them during the install, but this no longer seems to be the case.

    All I can see in the notes is the following:

    Note

    If you are installing a SQL Server 2012 Failover Cluster Instance in a Windows 2000 mixed mode domain, you must use domain global groups for SQL Server Clustered Services.

    I've asked the admin of the domain if this is the case, but I don't really understand it :hehe:

    If I do go ahead and install in a mixed domain, will the installer will prompt me to enter the domain groups?

    http://technet.microsoft.com/en-us/library/ms179530.aspx

  • The requirement to use group auth is based on the OS you are installing SQL server onto. If you're using a legacy OS such as Windows 2003 you'll need to use domain global AD groups.

    If you're installing onto Windows 2008 then elect to use SID based security, this is the preferred route.

    -----------------------------------------------------------------------------------------------------------

    "Ya can't make an omelette without breaking just a few eggs" 😉

  • ah cheers, so it's the OS that's the dependency & that answers my question very nicely 🙂

  • N.D (2/4/2014)


    ah cheers, so it's the OS that's the dependency & that answers my question very nicely 🙂

    On Windows 2008 you'll still get the option of AD groups but you should use the SIDs for increased security. The use of groups provided an easy route into the SQL Server as a sysadmin 😉

    -----------------------------------------------------------------------------------------------------------

    "Ya can't make an omelette without breaking just a few eggs" 😉

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply