|
1 | 1 | --- |
2 | | -title: Configure Windows Service Accounts and Permissions |
| 2 | +title: Configure windows service accounts and permissions |
3 | 3 | description: Get acquainted with the service accounts that are used to start and run services in SQL Server. See how to configure them and assign appropriate permissions. |
4 | 4 | ms.prod: sql |
5 | 5 | ms.prod_service: high-availability |
6 | 6 | ms.technology: configuration |
7 | 7 | ms.topic: reference |
8 | | -helpviewer_keywords: |
9 | | - - "startup service states [SQL Server]" |
10 | | - - "Setup [SQL Server], user accounts" |
11 | | - - "Windows permissions [SQL Server]" |
12 | | - - "modifying user accounts" |
13 | | - - "default accounts" |
14 | | - - "domains [SQL Server], user accounts" |
15 | | - - "startup accounts [SQL Server]" |
16 | | - - "system accounts [SQL Server]" |
17 | | - - "services [SQL Server], permissions" |
18 | | - - "ACL (access control list)" |
19 | | - - "local system accounts [SQL Server]" |
20 | | - - "instance-aware services [SQL Server]" |
21 | | - - "permissions [SQL Server], services" |
22 | | - - "SQL Server Agent service, user accounts" |
23 | | - - "Windows NT permissions [SQL Server]" |
24 | | - - "user accounts [SQL Server]" |
25 | | - - "identifying instance-unaware services [SQL Server]" |
26 | | - - "installing SQL Server, user accounts" |
27 | | - - "disabled startup state [SQL Server]" |
28 | | - - "user accounts [SQL Server], users" |
29 | | - - "Local Service account [SQL Server]" |
30 | | - - "SQL Server Installation Wizard" |
31 | | - - "instance-unaware services [SQL Server]" |
32 | | - - "services [SQL Server], configuring at installation" |
33 | | - - "Windows accounts [SQL Server]" |
34 | | - - "SQL Server services, user accounts" |
35 | | - - "user accounts [SQL Server], services" |
36 | | - - "MSSQLServer" |
37 | | - - "identifying instance-aware services [SQL Server]" |
38 | | - - "services [SQL Server], accounts" |
39 | | - - "access control lists" |
40 | | - - "optional accounts [SQL Server]" |
41 | | - - "service accounts [SQL Server]" |
42 | | - - "accounts [SQL Server], services" |
43 | | - - "built-in system accounts [SQL Server]" |
44 | | - - "automatic startup state" |
45 | | - - "domains [SQL Server]" |
46 | | - - "manual startup state [SQL Server]" |
47 | | - - "accounts [SQL Server], user" |
48 | | -ms.assetid: 309b9dac-0b3a-4617-85ef-c4519ce9d014 |
49 | 8 | author: markingmyname |
50 | 9 | ms.author: maghan |
51 | 10 | ms.reviewer: "" |
@@ -200,7 +159,8 @@ Managed service accounts, group-managed service accounts, and virtual accounts a |
200 | 159 |
|
201 | 160 | For more information on Managed Service Accounts and Virtual Accounts, see the **Managed service account and virtual account concepts** section of [Service Accounts Step-by-Step Guide](https://technet.microsoft.com/library/dd548356\(WS.10\).aspx) and [Managed Service Accounts Frequently Asked Questions (FAQ)](https://technet.microsoft.com/library/ff641729\(WS.10\).aspx). |
202 | 161 |
|
203 | | -**Security Note:** [!INCLUDE[ssNoteLowRights](../../includes/ssnotelowrights-md.md)] Use a [MSA](#MSA), [gMSA](#GMSA) or [virtual account](#VA_Desc) when possible. When MSA, gMSA and virtual accounts aren't possible, use a specific low-privilege user account or domain account instead of a shared account for SQL Server services. Use separate accounts for different SQL Server services. Don't grant additional permissions to the SQL Server service account or the service groups. Permissions are granted through group membership or granted directly to a service SID, where a service SID is supported. |
| 162 | +> [!Note] |
| 163 | +> [!INCLUDE[ssNoteLowRights](../../includes/ssnotelowrights-md.md)] Use a [MSA](#MSA), [gMSA](#GMSA) or [virtual account](#VA_Desc) when possible. When MSA, gMSA and virtual accounts aren't possible, use a specific low-privilege user account or domain account instead of a shared account for SQL Server services. Use separate accounts for different SQL Server services. Don't grant additional permissions to the SQL Server service account or the service groups. Permissions are granted through group membership or granted directly to a service SID, where a service SID is supported. |
204 | 164 |
|
205 | 165 | ### <a name="Auto_Start"></a> Automatic startup |
206 | 166 |
|
|
0 commit comments