Changing SQL Server service account

on

  1.  The service account shouldn't be a local administrator or domain administrator. It should have “full control” permissions on data, log and backup directories for read and write activities. Changing in SQL Server Configuration Manager permissions should be added automatically, but check backup folder and log folder, they should have "full control" permissions too.
  2. SQL Server reboot is needed if you are changed service account and password. To change the password reboot is not needed.
  3. To change the service account for SQL Server, it is recommended to make the update only in the SQL Server Configuration Manager. Windows local security store which protects the service master key for the Database Engine will be updated too. Do not update on services.msc.
  4. Configure Instant file initialization and Lock Pages In Memory security policies.
  5. SQL Server Agent account should be in sysadmin role on the instance. Changing account on SQL Server Configuration Manager it should be added automatically, but better to check it after the change.

Comments

Post a Comment