October 15, 2007 at 9:43 am
In the list of logins on a SQL 2005 server we have the following with sysadmin rights:
MACHINE\SQLServer2005MSSQLUser$MACHINE$MSSQLSERVER
MACHINE\SQLServer2005SQLAgentUser$MACHINE$MSSQLSERVER
NT AUTHORITY\SYSTEM
The server is configured to run with the Local System account, but I would have assumed that NT AUTHORITY\SYSTEM would have been the only account which needed such high rights. Where do the other two come from and what are they for? Should I be worried about it?
I'm trying to sort out a server that somebody else set up, so that as few accounts as possible have sysadmin rights, but I'm more familiar with SQL 2000 than SQL 2005. I have already successfully removed BUILTIN\Admins.
Thanks,
Rachel.
October 15, 2007 at 11:41 am
They are service accounts you can find more information about them and which permission they need here:
http://msdn2.microsoft.com/en-us/library/ms143504.aspx
and
http://www.sqlservercentral.com/articles/Administration/sqlserver2005serviceaccounts/2341/
Markus
[font="Verdana"]Markus Bohse[/font]
October 22, 2007 at 3:03 am
This has been very helpful - thank you.
Rachel.
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply