Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 

The Voice of the DBA

Steve Jones is the editor of SQLServerCentral.com and visits a wide variety of data related topics in his daily editorial. Steve has spent years working as a DBA and general purpose Windows administrator, primarily working with SQL Server since it was ported from Sybase in 1990. You can follow Steve on Twitter at twitter.com/way0utwest

How to change the SQL Server service account

It’s easy. First you click here:

serviceaccount1

Then you find the SQL Server 2008 or 2008 R2 program group

serviceaccount2

Open those and then pick the SQL Server Configuration Manager.

serviceaccount3

You might get a UAC message asking if you want to make changes to the system, and say yes. This application can change service accounts, which is a sysadmin function. The screen basically looks like this:

serviceaccount4

If you right click the SQL Server entry, the database engine, you can select the properties, and you’ll get this screen:

serviceaccount6

On this screen, you can change the service account, and this is where you should change it. There are the three built in accounts in the top drop down (Local System, Local Service, and Network Service). I don’t recommend these. Instead, I recommend you create a new Active Directory Domain account (or local user account), assign it no rights, and then use the lower radio button to select the account.

serviceaccount7

Note that you do can search for it, and also you need to enter the user account. The password, while conforming to your domain policy, shouldn’t be one you use elsewhere. Make it a long, impossible to guess combination of stuff. You don’t need to recover this or log on as the user after you’ve assigned it to SQL Server. If you need to recover the password, just change it.

A couple quick notes, on the Service Tab you can set the startup mode (Manual, automatic) for the database engine.

serviceaccount8

You can also change startup parameters here, on the Advanced tab.

serviceaccount9

That’s it, it’s easy, and it’s how you should change the service account for SQL Server.


Filed under: Blog Tagged: security, sql server, syndicated

Comments

Leave a comment on the original post [voiceofthedba.wordpress.com, opens in a new window]

Loading comments...