Each account is an ordinary user account with no administrative privileges, althought the SQL Agent account is a member of the "Pre-Windows 2000 compatible access" group on the domain controller. This group membership was specified in Books Online ("Selecting an Account for SQL Server Agent Service").
If you have installed the September CTP, you will notice several new local Windows groups on your server. These groups simply the process of configuring accounts used to run SQL Server services. All you need to do is add the account you wish to use for the specified service to the group and the account will have all the appropriate permissions it needs to run the service.
Two of these groups have very similar descriptions:
The first group is named:
"SQLServer2005MSFTEUser$ComputerName$InstanceName"
The second group is named:
"SQLServer2005MSSQLUser$ComputerName$InstanceName"
The description for these groups is identical:
"Members in the group have the required access and privileges to be assigned as the log on account for the associated instance of SQL Server and SQL Server FullText Search in SQL Server 2005"
Could someone from Microsoft explain the differences between these two groups?
I'm not sure why these have the same description. Someone in SQL Server Setup & Upgrade might be able to provide more information on that.For "SQLServer2005MSFTEUser$ComputerName$InstanceName", the description should be: "Members in the group have the required access and privileges to be assigned as the log on account for the associated instance of SQL Server FullText Search in SQL Server 2005".
And for "SQLServer2005MSSQLUser$ComputerName$InstanceName", the description should be: "Members in the group have the required access and privileges to be assigned as the log on account for the associated instance of SQL Server in SQL Server 2005".
If you setup different service accounts for SQLServer and SQL Server FullText via the SQL Server Configuration Manager (SCM), you will notice that each group will include the corresponding account. If you use SCM, you won't need to manually add accounts to these groups, they are managed automatically by the SCM tool.
Thanks
Laurentiu
No comments:
Post a Comment