
The other day I installed Microsoft SQL Server 2005 at work and was running the "SQL Server" service under the "LocalSystem" account. I read that it's recommended, from a security stand-point, to run this service under a different user account that you create. So this is how I did it:
- Open Computer Management
- Expand Computer Management (Local)
- Expand "System Tools"
- Expand "Local Users and Groups"
- Select Users
- Create a new user account. I would highly suggest a 16 charter password or larger using UPPER and lower case, numbers and punctuation. I would also suggest setting the account password not to expire nor allowing the user to change it)
- After account is created, close Computer Management
- Open the "SQL Server Configuration Manager"
- Click on the "SQL Server 2005 Services" node
- Double-click on the "SQL Server" service
- Click on the "This account" radio button
- Specify your account and password.
- Click the "OK" button to change the account, all needed rights will be assigned to this account (actually specific SQL Server groups that were created upon login are added to the account)
- Repeat for any other services you'd like to run under this account
No comments:
Post a Comment