Controlling Sql Server logins

  • Okay, I have been able to confirm that the domain\server$ accounts are related to Reporting Services and application pools. the is a good write up at sqlblogcasts.com/blogs/stevechowles/archive/2007/07/02/reporting-services-2005-for-the-dba-changing-application-pool-identity.aspx that describes what I was looking for.

    Thanks,

    Mark

    Mark Johnson
    MCP, MCTS Sql Server 2005,MCTS Sql Server 2008, OCP

  • Thanks for the update and reference. That's great information to have.

  • Side note - typically, domain\servername$ accounts are used by the Network Service builtin account. So if any service is configured to use Network Service as its account and it requires access to an SQL Server, it will use the machine credentials (i.e. domain\servername$).

    Be warned - ANY service that uses Network Service as its account will have access to any server/database that the machine account is granted access to, whether it needs it or not. Strengthening the position of 'use dedicated service accounts'.



    Scott Duncan

    MARCUS. Why dost thou laugh? It fits not with this hour.
    TITUS. Why, I have not another tear to shed;
    --Titus Andronicus, William Shakespeare


Viewing 3 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply