sql server 2008 r2 service account permissions
-
Saturday, June 09, 2012 1:29 PM
sql server 2008 r2, Do we need to give the required service account permissions explicitly or the sql server setup will automatically assign the permission when setup running ?
And what are the permission we have to give if we need to give explicitly
Thanks
All Replies
-
Saturday, June 09, 2012 2:42 PM
The needed service account permissions are assigned automatically during installation or when the service account is changed using SQL Server Configuration Manager. The required Windows Privileges and Rights are documented in the SQL Server Books Online (http://msdn.microsoft.com/en-us/library/ms143504.aspx) if you want to assign permissions manually but it generally recommended to let SQL Server installation or SSCM do so automatically.
Dan Guzman, SQL Server MVP, http://weblogs.sqlteam.com/dang/
- Marked As Answer by amber zhangModerator Tuesday, June 19, 2012 2:29 AM
-
Saturday, June 09, 2012 6:18 PM
Hi thanks for the information ,
But in my case somehow the sql server installation failing due to the permission issues ,(I am installing the sql server using a domain admin account but the sql service account is a standard domain user) , In Local group policy Adding user or group button has disabled in Take ownership of files or other objects,Log on as a service and Back up files and directories....... By default it's disabled or is there any problem in our domain policy ?
Why the normal installation fails? .Is it because of the sql server setup cannot add the sql service account to the required local policy ? .Installation failure has any relation with the disabled local group policy?
Please advise
Thanks
-
Saturday, June 09, 2012 6:54 PM
Make sure you run SQL Server setup as an administrator. This is required for the install to function properly.
Dan Guzman, SQL Server MVP, http://weblogs.sqlteam.com/dang/
-
Saturday, June 09, 2012 6:55 PM
if you're installing on Windows 7 or Windows Server 2008(R2) or higher than you need to explicitly specify that you want to run with administrative privilege by specifying "run as administrator" otherwise you don't have the right to install anything even if you're a domain admin due to UAC concept which remember the member ship of administrator group but it is removed from the current process token.
Please use Mark as Answer if my post solved your problem and use Vote As Helpful if a post was useful.
-
Saturday, June 09, 2012 8:10 PMYes running the setup as domain administrator . Again is there any Installation failure has any relation with the disabled local group policy?
-
Sunday, June 10, 2012 9:24 AM
usually Local Policy should be configured such that Domain Admin bypass some of them.
But if the SQL Server does not have the permission to create local Windows group it would certainly fail but the error log for the installation should indicate this.
Could you try to remove the local policy preventing creation of local windows group?
Please use Mark as Answer if my post solved your problem and use Vote As Helpful if a post was useful.
- Edited by Daniel_Steiner Sunday, June 10, 2012 9:51 AM
-
Sunday, June 10, 2012 11:53 AMthe account can create local group on the machine
-
Sunday, June 10, 2012 7:00 PMplease provide the installation log file
Please use Mark as Answer if my post solved your problem and use Vote As Helpful if a post was useful.
-
Sunday, June 10, 2012 7:46 PM
Hi Dan
"The needed service account permissions are assigned automatically during installation or when the service account is changed using SQL Server Configuration Manager."
Is it applicable to the sqlserver agent account too?
-
Sunday, June 10, 2012 9:01 PM
Yes, the same applies to the SQL Server Agent service account.
Dan Guzman, SQL Server MVP, http://weblogs.sqlteam.com/dang/
- Marked As Answer by amber zhangModerator Tuesday, June 19, 2012 2:29 AM

