<a href="http://g.adspeed.net/ad.php?do=clk&zid=15220&wd=468&ht=60&pair=as" target="_blank"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15220&wd=468&ht=60&pair=as" alt="i" width="468" height="60"/></a>
Log in
::
Register
::
Not logged in
Home
Tags
Articles
Editorials
Stairways
Forums
Scripts
Videos
Blogs
QotD
Books
Ask SSC
SQL Jobs
Training
Authors
About us
Contact us
Newsletters
Write for us
<a href="http://g.adspeed.net/ad.php?do=clk&zid=15491&wd=120&ht=300&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=15491&wd=120&ht=300&pair=as" alt="i" width="120" height="300"/></a>
Recent Posts
Recent Posts
Popular Topics
Popular Topics
Home
Search
Members
Calendar
Who's On
Home
»
SQL Server 2008
»
SQL Server 2008 High Availability
»
prerequisite mirroring setup?
prerequisite mirroring setup?
Rate Topic
Display Mode
Topic Options
Author
Message
ananda.murugesan
ananda.murugesan
Posted Tuesday, August 28, 2012 12:40 AM
SSC Eights!
Group: General Forum Members
Last Login: Yesterday @ 10:17 PM
Points: 828,
Visits: 2,421
Hi,
Does SQL Engine service account should be domain account? or can we possible to configure configure local user account?
currently prinicipal & mirror servers are running member of corparate domain.
thanks
Post #1350705
MissTippsInOz
MissTippsInOz
Posted Tuesday, August 28, 2012 12:57 AM
SSC Veteran
Group: General Forum Members
Last Login: Thursday, June 13, 2013 6:11 PM
Points: 286,
Visits: 523
BOL could have answered your question with minimal effort but since you're being lazy and I'm feeling generous I'll copy and paste for you.
Under Windows Authentication, each server instance logs in to the other side using the Windows credentials of the Windows user account under which the process is running. For this reason, Windows Authentication requires that SQL Server services must run as domain users in trusted domains or as network services.
To authenticate both ends of a connection, Windows Authentication uses the credentials of the Windows user account on which the SQL Server instances are running. Therefore, the user account of each server instance must have the permissions needed to log in and send messages to each of the other server instances.
In some situations, such as when server instances are not in trusted domains or when SQL Server is running as a local service, Windows Authentication is unavailable. In such cases, instead of user credentials, certificates are required to authenticate connection requests. The mirroring endpoint of each server instance must be configured with its own locally created certificate.
You have just created extra work for me now because I'm going to go and change my signature
Clare
_________________________________________________________________________________________________________________
Measure twice; cut once (and have a good saw)
Hey, just a thought.....did you check Books Online yet?
Post #1350707
ananda.murugesan
ananda.murugesan
Posted Tuesday, August 28, 2012 1:32 AM
SSC Eights!
Group: General Forum Members
Last Login: Yesterday @ 10:17 PM
Points: 828,
Visits: 2,421
thanks for reply...
Ok, domain account should be required to configure database mirroring also principal & mirror server SQL engine should be running same domain account.
Does domain account should be added into domain administrators group or added into local administrators group?
what is the server restart procedure after mirroring configured both server? if any patch applied from WSUS server.
Post #1350713
MissTippsInOz
MissTippsInOz
Posted Tuesday, August 28, 2012 2:48 AM
SSC Veteran
Group: General Forum Members
Last Login: Thursday, June 13, 2013 6:11 PM
Points: 286,
Visits: 523
No, they don't both need to be running under the same account, but each account will need to have a login on the other server and the necessary privileges.
There is no requirement for your SQL Server service account to be a member of Local Admins and definitely not, never, ever a member of Domain Admins!
Clare
_________________________________________________________________________________________________________________
Measure twice; cut once (and have a good saw)
Hey, just a thought.....did you check Books Online yet?
Post #1350737
ananda.murugesan
ananda.murugesan
Posted Tuesday, August 28, 2012 3:44 AM
SSC Eights!
Group: General Forum Members
Last Login: Yesterday @ 10:17 PM
Points: 828,
Visits: 2,421
As per domain policy, SQL service account not given to permission for login that server.
Can we possible configure NT authority /Network service - this account assign SQL engine for mirroring setup both the server
thanks
Post #1350772
MissTippsInOz
MissTippsInOz
Posted Tuesday, August 28, 2012 4:15 AM
SSC Veteran
Group: General Forum Members
Last Login: Thursday, June 13, 2013 6:11 PM
Points: 286,
Visits: 523
I've not set it up that way personally but, as per my earlier post, BOL says you can!
Clare
_________________________________________________________________________________________________________________
Measure twice; cut once (and have a good saw)
Hey, just a thought.....did you check Books Online yet?
Post #1350785
ananda.murugesan
ananda.murugesan
Posted Tuesday, August 28, 2012 5:59 AM
SSC Eights!
Group: General Forum Members
Last Login: Yesterday @ 10:17 PM
Points: 828,
Visits: 2,421
one more question?
As per BOL http://msdn.microsoft.com/en-us/library/ms189434(v=SQL.105).aspx
when using windows authentication, SQL Engine account should be domain account for configure database mirroring.
as per my current instance can login mixed mode authentication such as users 'sa', 'administrator'
Can we use like this as below
Principal
Specify the service account of the principal server instance.
Principal servername\Administrator
Mirror
Specify the service account of the mirror server instance.
Mirror servername\Administrator
But SQL server service account running local user account for example
1. Principal servername\SQLServEngine - for MSSQL
2. Principal servername\SQLServAgent - for Agent
Both user added into login at sqlserver instance.
thanks
Post #1350855
« Prev Topic
|
Next Topic »
Permissions
You
cannot
post new topics.
You
cannot
post topic replies.
You
cannot
post new polls.
You
cannot
post replies to polls.
You
cannot
edit your own topics.
You
cannot
delete your own topics.
You
cannot
edit other topics.
You
cannot
delete other topics.
You
cannot
edit your own posts.
You
cannot
edit other posts.
You
cannot
delete your own posts.
You
cannot
delete other posts.
You
cannot
post events.
You
cannot
edit your own events.
You
cannot
edit other events.
You
cannot
delete your own events.
You
cannot
delete other events.
You
cannot
send private messages.
You
cannot
send emails.
You
may
read topics.
You
cannot
rate topics.
You
cannot
vote within polls.
You
cannot
upload attachments.
You
may
download attachments.
You
cannot
post HTML code.
You
cannot
edit HTML code.
You
cannot
post IFCode.
You
cannot
post JavaScript.
You
cannot
post EmotIcons.
You
cannot
post or upload images.
Copyright © 2002-2013 Simple Talk Publishing. All Rights Reserved.
Privacy Policy.
Terms of Use.
Report Abuse.
