Sql-server – What permissions are required for SQL Server to run as a (active directory) domain user

active-directorysql serverwindows-server-2003

I wish to switch the SQL Server 2005 service from running as a local user to running under a domain user (mainly so I can make backups to domain-permissioned shares). I can't seem to find a definitive list of the windows permissions that I should grant that domain user, does anyone know where I can find a list?

Alternatively, is there a local group on the SQL server box I should make the domain user a member of?

Thanks in advance,

-James

Best Answer

This is what I did:

  1. Create a new domain user named sql_user, granting logon to the SQL Server target machine
  2. On the target SQL Server machine, using the users control panel add the domain user to the group SQLServer2005MSSQLUser$HOST$MSSQLSERVER (beware there is a similar group named: SQLServer2005MSFTEUser$HOST$MSSQLSERVER which it seems the user does not need to be a member of)
  3. Grant sql_user the ability to lock pages in memory if using the AWE extensions, see also: MSDN article
  4. Change the SQL Server service to startup as the new domain user in the service control panel
  5. Give sql_user write permission to the c:\program files\microsoft sql server directory and all subdirectories
  6. Give sql_user write permission to the datafiles for all of your databases
  7. Restart the database service
  8. Check the Windows Error log for any errors
Related Topic