August 17, 2009 at 7:34 pm
Hi,
I am wondering if I need to have Windows 2008 DC and Active Directory to have my SQL 2008 servers running under SID service accounts?
Any help is appreciated.
August 17, 2009 at 9:33 pm
I'm not familiar with SID service accounts.
Are you talking about windows integrated security?
If so then you will need your users on an AD domain or a AD domain trusted by the AD domain that the server is in..
Could you elaborate..
CEWII
August 18, 2009 at 5:58 am
No, not NT groups.
in SQL 2008 you no longer need password for the service account, and you don't need the service account to exist in NT group before install. This is possible in Win 2008/SQL 2008 installation. I am wondering if the whole infrastructure needs to be Win 2008.
August 18, 2009 at 6:45 am
The functions of service accounts work with or without an AD domain. The difference is without they are limited to accessing the local machine only. I haven't seen anything about the Service SIDs, but I found it here: http://msdn.microsoft.com/en-us/library/ms143504.aspx#Service_SID. No mention of AD. This KB (http://support.microsoft.com/kb/955401) mentions AD, but I don't see anything else on MS.
My guess is that you don't need AD, but that if not, you are essentially running a local account that is limited in scope.
I'd be curious to know if you run this and how it works. Or what additional security it provides over a limited scope user account or a service account.
August 21, 2009 at 5:53 pm
This is not available yet. You're thinking of Managed Service Accounts which isn't available until Windows Server 2008 R2 (which isn't RTM yet). In that case, your Active Directory infrastructure has to have the following setup changes done (which require schema extensions):
- Windows Server 2008 R2 Forestprep done.
- Windows Server 2008 R2 domainprep done on the domain(s) in question.
- At least one Windows Server 2008 R2 domain controller.
More here:
Service Accounts Step-by-Step Guide
K. Brian Kelley
@kbriankelley
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply