Hello Folks,
You would had deal with these User Account while the installation of SQL Server 2008 setup. But had you noticed, why the Domain User Account is being preferred over the other account?
If not, then don’t worry, because you will get the answer in a while!
First I will let you know about the brief of Windows Security.
Do you know the function of Windows Security within SQL Server?
Since SQL Server resides within the Windows environment, so securing the Windows Server becomes one of the common aspects of the securing strategy.
SQL Server databases often support the websites, therefore Internet Information Server (IIS) security and firewalls becomes the integral part of the security plan.
SQL Server Login:
User access to SQL Server and SQL Server’s Windows Accounts are the two different logins, and should never be mixed up!!
SQL Server users don’t need access to the database directories or a data file because SQL Server Process performs the actual file access.
But for this, SQL Server Process does need permission to access the files on Windows Account. They are basically of three types:
- Local User Account
- Local System Account
- Domain User Account
Will let you know each account one by one:
Local User Account:
- This will turn out to be the best option in the case where Network Access is not required.
- It cannot be used outside the server.
Local System Account:
- SQL Server can use the local system account of OS for permission to the machine.
- But it is only intended for Single – Server installation.
- It also fails to provide the network security required for thee distributed processing.
- Since, the local system accounts has implicit privileges in the OS and active directory, so it provides more rights than even a member of the Administrators Account.
Domain User Account:
- SQL Server can access a Windows User Account created specifically for it.
- SQL Server Domain User Account can be granted administrator rights for the server.
- It can also access the network through the server to communicate with the other servers.
- Well, that is why Domain User Account is preferred!!
Well, this was all about Windows Security in SQL Server, which is in-fact a very brief.
Hope you like it!!
Regards
Piyush Bajaj
Like us on FaceBook | Follow us on Twitter | Join the fastest growing SQL Server group on FaceBook
Follow me on Twitter | Follow me on FaceBook
Hence we require Domain User Account (or Domain Admin Account as per the requirement) when we want to setup Log Shipping, Replication, Database Mirroring, Remote backup plan etc. where there is a requirement to access the external resources.
Nice one Piyush…
Thanks Amit 🙂
can you please post a topic on how to install sql server 2008 (or R2), on windows 7 and differences between stand alone mode, sharepoint integration mode, including user accounts we need to assign please for ssrs, ssis, ssas and sql server also.
thank you.
Hi Achyuth,
I have already posted an article on the topic “Installation Guide for SQL Server 2008 R2”, with all the default settings and in the stad alone mode. The link for this is:
https://www.sqlservergeeks.com/articles/sql-server-bi/32/installation-guide-for-sql-server-2008-r2
Hi piyush
This is kranthi,i have a one doubt 1)100% cpu utilization is thier? what is the steps i followed??
2)can you change instance name? is it possible or not?
Thanks&Regards,
kranthi M
SQL DBA
Hi,
I tried to install SQL server 2008 through local account , it got successfully installed. But after that i faced an issue while connecting to instance. It was giving the error.
Error
##############################
TITLE: Connect to Server
——————————
Cannot connect to MSSQLSERVER.
——————————
ADDITIONAL INFORMATION:
A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: Named Pipes Provider, error: 40 – Could not open a connection to SQL Server) (Microsoft SQL Server, Error: 53)
For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&EvtSrc=MSSQLServer&EvtID=53&LinkId=20476
——————————
BUTTONS:
OK
——————————
#######################################
can you please help me on this…
1. All the services were enabled.
2. instance name was correct.
3.windows firewall port 1433was configured.
Ihope it was not due to local account.
Hi,
I just want to ask you that is there any difference if we run our software( sql server 2008 as back end) with only 1 domain user instead of making more domain user 1 for each user..
Hi there, thanks in advance
I have a problem similar to that. If I have 2 servers, one for SQL Server database and other for AD (Domain Controller). I want to restrict the access to my SQL Server database through getting access from Domain accounts only. i.e. if any one doe not login through through a Domain account, he will not able to access my database. How can I configure this?
Hello Piyush,
I have one query: Can we use the Windows Domain account to login SQL Server and access the Databases.