January 5, 2016 at 1:46 pm
The documentation states that you use account name, password.
This brings up two questions... how can you set Active Directory groups up, and even for users.. what happens when their password changes ? Do I have to get their password every month and re-set up their proxy account?
January 5, 2016 at 1:57 pm
You don't set up proxy account per user. You set up a single proxy account that all non-sysadmin users. That would be a special login that is not used for anything else, and certainly does not map to a person. If you change the password in the AD, you will also need to update the credential in SQL Server. That's the kind of thing you would put in your run book, so that no one only performs only half of the job.
It goes without saying that the proxy account should not be granted any powerful permissions.
[font="Times New Roman"]Erland Sommarskog, SQL Server MVP, www.sommarskog.se[/font]
January 5, 2016 at 2:01 pm
Erland Sommarskog (1/5/2016)
You don't set up proxy account per user. You set up a single proxy account that all non-sysadmin users. That would be a special login that is not used for anything else, and certainly does not map to a person. If you change the password in the AD, you will also need to update the credential in SQL Server. That's the kind of thing you would put in your run book, so that no one only performs only half of the job.It goes without saying that the proxy account should not be granted any powerful permissions.
hmm good point.. I will need to request a new AD user to use for the proxy... thanks for your help.
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply