September 18, 2018 at 2:22 pm
Hi,
Several of our SQL Server instances were installed and set up to run with a local account (NT Service\MSSQLSERVER). If I wanted to change this to a domain account, I know I can go into SQL Server Configuration Manager ( per this document https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/scm-services-change-the-service-startup-account?view=sql-server-2017) but are there other considerations? For example, the DATA directory, the directories under the folder structure set up by Ola Hallengren's backup solution, etc.? Do I need to re-set those permissions to include the new domain account?
Thanks,
Mike
Mike Scalise, PMP
https://www.michaelscalise.com
September 18, 2018 at 3:26 pm
Mike Scalise - Tuesday, September 18, 2018 2:22 PMHi,Several of our SQL Server instances were installed and set up to run with a local account (NT Service\MSSQLSERVER). If I wanted to change this to a domain account, I know I can go into SQL Server Configuration Manager ( per this document https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/scm-services-change-the-service-startup-account?view=sql-server-2017) but are there other considerations? For example, the DATA directory, the directories under the folder structure set up by Ola Hallengren's backup solution, etc.? Do I need to re-set those permissions to include the new domain account?
Thanks,
Mike
If you are using directories that weren't specified during setup, changed things to different directories, etc then yes you would want to add those permissions for the new service account.
Sue
September 19, 2018 at 7:26 am
Sue_H - Tuesday, September 18, 2018 3:26 PMMike Scalise - Tuesday, September 18, 2018 2:22 PMHi,Several of our SQL Server instances were installed and set up to run with a local account (NT Service\MSSQLSERVER). If I wanted to change this to a domain account, I know I can go into SQL Server Configuration Manager ( per this document https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/scm-services-change-the-service-startup-account?view=sql-server-2017) but are there other considerations? For example, the DATA directory, the directories under the folder structure set up by Ola Hallengren's backup solution, etc.? Do I need to re-set those permissions to include the new domain account?
Thanks,
Mike
If you are using directories that weren't specified during setup, changed things to different directories, etc then yes you would want to add those permissions for the new service account.
Sue
Thanks, Sue. What if I am using directories that were part of the setup? For example, "DATA" -- \Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\DATA ? You would expect the permissions to be updated?
Mike
Mike Scalise, PMP
https://www.michaelscalise.com
September 19, 2018 at 7:45 am
Mike Scalise - Wednesday, September 19, 2018 7:26 AMSue_H - Tuesday, September 18, 2018 3:26 PMMike Scalise - Tuesday, September 18, 2018 2:22 PMHi,Several of our SQL Server instances were installed and set up to run with a local account (NT Service\MSSQLSERVER). If I wanted to change this to a domain account, I know I can go into SQL Server Configuration Manager ( per this document https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/scm-services-change-the-service-startup-account?view=sql-server-2017) but are there other considerations? For example, the DATA directory, the directories under the folder structure set up by Ola Hallengren's backup solution, etc.? Do I need to re-set those permissions to include the new domain account?
Thanks,
Mike
If you are using directories that weren't specified during setup, changed things to different directories, etc then yes you would want to add those permissions for the new service account.
Sue
Thanks, Sue. What if I am using directories that were part of the setup? For example, "DATA" -- \Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\DATA ? You would expect the permissions to be updated?
Mike
Those would be fine - the permissions are granted to the per-service SID (MSSQLSERVER or MSSQL$InstanceName) which you should be able to see if you check the permissions now before the change. The permissions are granted to the folders are listed in this document if you want to check those - in the File System Permissions section:
Configure Windows Service Accounts and Permissions
Sue
September 19, 2018 at 12:38 pm
Sue_H - Wednesday, September 19, 2018 7:45 AMMike Scalise - Wednesday, September 19, 2018 7:26 AMSue_H - Tuesday, September 18, 2018 3:26 PMMike Scalise - Tuesday, September 18, 2018 2:22 PMHi,Several of our SQL Server instances were installed and set up to run with a local account (NT Service\MSSQLSERVER). If I wanted to change this to a domain account, I know I can go into SQL Server Configuration Manager ( per this document https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/scm-services-change-the-service-startup-account?view=sql-server-2017) but are there other considerations? For example, the DATA directory, the directories under the folder structure set up by Ola Hallengren's backup solution, etc.? Do I need to re-set those permissions to include the new domain account?
Thanks,
Mike
If you are using directories that weren't specified during setup, changed things to different directories, etc then yes you would want to add those permissions for the new service account.
Sue
Thanks, Sue. What if I am using directories that were part of the setup? For example, "DATA" -- \Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\DATA ? You would expect the permissions to be updated?
Mike
Those would be fine - the permissions are granted to the per-service SID (MSSQLSERVER or MSSQL$InstanceName) which you should be able to see if you check the permissions now before the change. The permissions are granted to the folders are listed in this document if you want to check those - in the File System Permissions section:
Configure Windows Service Accounts and PermissionsSue
Thank you, Sue. That's very helpful!
Mike Scalise, PMP
https://www.michaelscalise.com
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply