While installation of SQL Server, it will install different services like
1. SQL Server
2. SQL Server Agent
3. Integration Services
4. Analysis Services
5. Browser Service Etc.,
If any service wants to interact with domain resources, network resources like file shares, linked servers, we need use domain account. Many server-to-server activities can be performed only with a domain account.
Below are the steps to create domain account and required privileges required for domain account.
1. Domain account was created by windows administrator
2. Below are rights and privileges required for domain account to access SQL Server.
a. Add domain account to Logon as Service
b. Add domain account to Replace a process-level token
c. Add domain account to Bypass traverse checking
d. Add domain account to Adjust memory quotas for a process
e. Add account to security of MSSQL Install folder and provide full control.
\MSSQL\
f. Create domain account with password never expiry. If not please change password based on the age of the password.
No Special privileges are required for Domain account.
Post Configuration of SQL Server -
1. Disable the xp_cmdshell
2. Hide the Instance from SQL Server Configuration Manager
3. Change the SQL Server Port Number from default to customize
4. Add service account to Lock Pages in Memory
5. Disable the guest account
6. Disable the Built In Administrator (for older versions)
7. Assign Min and Max Memory as per the memory in your machine.
8. Create multiple tempdb files based on the number of processors.
9. Follow the Nomenclature for DBA jobs
10. Add DBA group into Administrator
11. Enable TCP IP / Named Pipes from SQL Server configuration Manager.
12. Allow Remote Connections.
13. Enable DAC
14. Make sure alerting in place etc.,
1. SQL Server
2. SQL Server Agent
3. Integration Services
4. Analysis Services
5. Browser Service Etc.,
If any service wants to interact with domain resources, network resources like file shares, linked servers, we need use domain account. Many server-to-server activities can be performed only with a domain account.
Below are the steps to create domain account and required privileges required for domain account.
1. Domain account was created by windows administrator
2. Below are rights and privileges required for domain account to access SQL Server.
a. Add domain account to Logon as Service
b. Add domain account to Replace a process-level token
c. Add domain account to Bypass traverse checking
d. Add domain account to Adjust memory quotas for a process
e. Add account to security of MSSQL Install folder and provide full control.
f. Create domain account with password never expiry. If not please change password based on the age of the password.
No Special privileges are required for Domain account.
Post Configuration of SQL Server -
1. Disable the xp_cmdshell
2. Hide the Instance from SQL Server Configuration Manager
3. Change the SQL Server Port Number from default to customize
4. Add service account to Lock Pages in Memory
5. Disable the guest account
6. Disable the Built In Administrator (for older versions)
7. Assign Min and Max Memory as per the memory in your machine.
8. Create multiple tempdb files based on the number of processors.
9. Follow the Nomenclature for DBA jobs
10. Add DBA group into Administrator
11. Enable TCP IP / Named Pipes from SQL Server configuration Manager.
12. Allow Remote Connections.
13. Enable DAC
14. Make sure alerting in place etc.,
Hi friends,
ReplyDeleteEach service in SQL server represents a process or a set of processes to manage authentication of SQL server operations with windows. This topic describes the default configuration of services in this release of SQL Server, and configuration options for SQL Server services that you can set during and after SQL Server installation. Thanks a lot!