No one seems to answer this question.

But this is really important for security.

Maybe this question should all start with:

Does the sql server agent account have to be a sysadmin?

Thanks

So then the service account has to be a sysadmin, correct?

And everytime I need to change the maintenance job, I have to login to SSMS by using that service account?

I...

Thank you, this is helpful.

Hope it can be explain in SQL books on line.

Thanks.

Also can anyone help answer my questions in my previous post?

I now got confused, I always have an impression SQL jobs running under sql service agent account, that's why the agent service account has to be a sysadmin, so it...

But isn't it the job running under sql service account which is sysadmin, as long as service account has access to NTFS or folders, it should be OK, so why...

I can see the nt service account and its sid in the group called SQLServerSQLAgentUser$Mycomputername$MSSQLSERVER,

Did you see a separate group called NT Service\SQLServerAgent ? And what's member?

See below:

I can see...

Thanks, not sure what this means:

"Jason explained that those groups contain the necessary SID(s) to map back to Active Directory, which I'm now guessing is a way to abstract those...

So far I don't find any errors for sql agent service account.

But I want to setup a good practice for service account.

If books onlins said it has to be a...

Thanks, but the problem is I cannot see a group in our windows local group called, NT Service\SQLSEVERAGENT.

You can try it too, it's not there.

Thanks

I see another person has the same issue:

http://ask.sqlservercentral.com/questions/2592/accounts-created-when-sql-server-2008-installed-on-win2008

But it seems no answer either.

The last statement in this link, says SQL service agent doesn't need to be a sysadmin, but sql...

I run the query, and I got the below, I removed individual persons account from the list.

I cannot see our service account in it.

The account is not in the BBS_SQLDBA...

I got really confused about the service account security of 2008.

I posted a couple of questions, it seems no one really answers that.

Please help.

We do have a group called NT SERVICE\SQLSERVERAGENT.

I have the same question how I can see the member of the group?

We never changed the service account, and when install we...

Thanks, I look through the logins in security in SSMS, I don't see it is in any existing group.