|
|
|
SSCertifiable
       
Group: General Forum Members
Last Login: Today @ 8:01 AM
Points: 6,736,
Visits: 11,790
|
|
The service account should not need to be a local admin, and I agree with you, I think it's a bad idea.
Here is the description of the SQLServerSQLAgentUser$MYCOMPUTERNAME$MSSQLSERVER group on my server.
Members in the group have the required access and privileges to be assigned as the log on account for the associated instance of SQL Server Agent.
That seems to point to the exact issue you're having, getting the service account the necessary permissions at the OS-level without granting Administrator.
I just ran a search on all ACLs on my machine and this is what my local group is able to access:
1. Full Control over C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\JOBS
2. These effective permissions on C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Log
Traverse Folder List folder / read data Read attributes Read extended attributes Create files / write data Create folders / append data Write Atributes Write Extended Attributes Delete subfolders and files Read permissions
You could create your own group, grant it these permissions, add your non-admin service account to it an give it a go. It may not get you there since there could be registry permissions or other local policies in play but it's worth a shot. If not then you could consider opening a ticket with Microsoft....or simply uninstalling and re-installing from scratch.
__________________________________________________________________________________________________ There are no special teachers of virtue, because virtue is taught by the whole community. --Plato
Believe you can and you're halfway there. --Theodore Roosevelt
Everything Should Be Made as Simple as Possible, But Not Simpler --Albert Einstein
The significant problems we face cannot be solved at the same level of thinking we were at when we created them. --Albert Einstein
1 apple is not exactly 1/8 of 8 apples. Because there are no absolutely identical apples. --Giordy
|
|
|
|
|
Valued Member
      
Group: General Forum Members
Last Login: Wednesday, May 15, 2013 1:00 PM
Points: 62,
Visits: 109
|
|
Thanks again. I just started trying that and found that there is no jobs folder under my sql server installation!
At this stage I'm thinking I need to reinstall.
< later >
I found the folders, they weren't installed on the C: drive but along with the data folder which was configured for another drive.
Interesting thing: the log folder has access rights granted for SQLAgent$SQLEXPRESS, but there is no such user or group defined in the active directory!
|
|
|
|