Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Administration (2000)
 setup security advice

Author  Topic 

smccreadie
Aged Yak Warrior

505 Posts

Posted - 2002-05-18 : 22:18:14
Next week I'll be setting up a SQL2K box that will run a vendor app (uses SQL as it's database). Of course, I want to make this as secure as possible but the vendor's rep doesn't have a clue what SQL functions are required. According to him, "just install it with all the defaults..."

My question is, I don't want to run the server under a dbo account. Any advice to what level of security I should run the server at to start? It's a retail pharmacy application - that's all I know at this point.

Thanks


VyasKN
SQL Server MVP & SQLTeam MVY

313 Posts

Posted - 2002-05-19 : 06:12:36
Most of us run SQL Server service under a domain account, that is a part of local administrators group on the SQL Server box. That works great with other security measures in place. However, you can run SQL Server under a non-admin account as well. But there are some features/functionality that may not work when SQL Server/SQL Agent runs under a non admin account. There's no clear documentation on this topic at the moment.

For a general checklist on SQL Server security, you might want to read: http://www.sqlteam.com/redir.asp?ItemID=5769

--
HTH,
Vyas
http://vyaskn.tripod.com
Go to Top of Page
   

- Advertisement -