You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/database-engine/configure-windows/configure-windows-service-accounts-and-permissions.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -122,7 +122,7 @@ The following table lists the default service accounts used by setup when instal
122
122
> [!IMPORTANT]
123
123
>
124
124
> - Always use SQL Server tools such as SQL Server Configuration Manager to change the account used by the [!INCLUDE[ssDEnoversion](../../includes/ssdenoversion-md.md)] or SQL Server Agent services, or to change the password for the account. In addition to changing the account name, SQL Server Configuration Manager performs additional configuration such as updating the Windows local security store which protects the service master key for the [!INCLUDE[ssDE](../../includes/ssde-md.md)]. Other tools such as the Windows Services Control Manager can change the account name but Don't change all the required settings.
125
-
> - For [!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] instances that you deploy in a SharePoint farm, always use SharePoint Central Administration to change the server accounts for [!INCLUDE[ssGeminiMTS](../../includes/ssgeminimts-md.md)] applications and the [!INCLUDE[ssGeminiSrv](../../includes/ssgeminisrv-md.md)]. Associated settings and permissions are updated to use the new account information when you use Central Administration.
125
+
> - For [!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] instances that you deploy in a SharePoint farm, always use SharePoint Central Administration to change the server accounts for [!INCLUDE[power-pivot-service-md](../../includes/power-pivot-service-md.md)] applications and the [!INCLUDE[analysis-services-service-md](../../includes/analysis-services-service-md.md)]. Associated settings and permissions are updated to use the new account information when you use Central Administration.
126
126
> - To change [!INCLUDE[ssRSnoversion](../../includes/ssrsnoversion-md.md)] options, use the Reporting Services Configuration Tool.
127
127
128
128
### <aid="New_Accounts"></a> Managed service accounts, group-managed service accounts, and virtual accounts
@@ -243,7 +243,7 @@ The following table shows permissions that SQL Server Setup requests for the per
|**[!INCLUDE[ssDEnoversion](../../includes/ssdenoversion-md.md)]:**<br /><br /> (All rights are granted to the per-service SID. Default instance: `NT SERVICE\MSSQLSERVER`. Named instance: `NT Service\MSSQL$<instance_name>`.)|**Log on as a service** (SeServiceLogonRight)<br /><br /> **Replace a process-level token** (SeAssignPrimaryTokenPrivilege)<br /><br /> **Bypass traverse checking** (SeChangeNotifyPrivilege)<br /><br /> **Adjust memory quotas for a process** (SeIncreaseQuotaPrivilege)<br /><br /> Permission to start SQL Writer<br /><br /> Permission to read the Event Log service<br /><br /> Permission to read the Remote Procedure Call service|
245
245
|**SQL Server Agent:** <sup>1</sup><br /><br /> (All rights are granted to the per-service SID. Default instance: `NT Service\SQLSERVERAGENT`. Named instance: `NT Service\SQLAGENT$<instance_name>`.)|**Log on as a service** (SeServiceLogonRight)<br /><br /> **Replace a process-level token** (SeAssignPrimaryTokenPrivilege)<br /><br /> **Bypass traverse checking** (SeChangeNotifyPrivilege)<br /><br /> **Adjust memory quotas for a process** (SeIncreaseQuotaPrivilege)|
246
-
|**[!INCLUDE[ssAS](../../includes/ssas-md.md)]:**<br /><br /> (All rights are granted to a local Windows group. Default instance: `SQLServerMSASUser$<computer_name>$MSSQLSERVER`. Named instance: `SQLServerMSASUser$<computer_name>$<instance_name>`. [!INCLUDE[ssGeminiShort](../../includes/ssgeminishort-md.md)] instance: `SQLServerMSASUser$<computer_name>$PowerPivot`.)|**Log on as a service** (SeServiceLogonRight)<br /><br /> For tabular only:<br /><br /> **Increase a process working set** (SeIncreaseWorkingSetPrivilege)<br /><br /> **Adjust memory quotas for a process** (SeIncreaseQuotaPrivilege)<br /><br /> **Lock pages in memory** (SeLockMemoryPrivilege) - this is needed only when paging is turned off entirely.<br /><br /> For failover cluster installations only:<br /><br /> **Increase scheduling priority** (SeIncreaseBasePriorityPrivilege)|
246
+
|**[!INCLUDE[ssAS](../../includes/ssas-md.md)]:**<br /><br /> (All rights are granted to a local Windows group. Default instance: `SQLServerMSASUser$<computer_name>$MSSQLSERVER`. Named instance: `SQLServerMSASUser$<computer_name>$<instance_name>`. [!INCLUDE[power-pivot-sharepoint-md](../../includes/power-pivot-sharepoint-md.md)] instance: `SQLServerMSASUser$<computer_name>$PowerPivot`.)|**Log on as a service** (SeServiceLogonRight)<br /><br /> For tabular only:<br /><br /> **Increase a process working set** (SeIncreaseWorkingSetPrivilege)<br /><br /> **Adjust memory quotas for a process** (SeIncreaseQuotaPrivilege)<br /><br /> **Lock pages in memory** (SeLockMemoryPrivilege) - this is needed only when paging is turned off entirely.<br /><br /> For failover cluster installations only:<br /><br /> **Increase scheduling priority** (SeIncreaseBasePriorityPrivilege)|
247
247
|**[!INCLUDE[ssRS](../../includes/ssrs.md)]:**<br /><br /> (All rights are granted to the per-service SID. Default instance: `NT SERVICE\ReportServer`. Named instance: `NT SERVICE\ReportServer$<instance_name>`.)|**Log on as a service** (SeServiceLogonRight)|
248
248
|**[!INCLUDE[ssIS](../../includes/ssis-md.md)]:**<br /><br /> (All rights are granted to the per-service SID. Default instance and named instance: `NT SERVICE\MsDtsServer150`. [!INCLUDE[ssISnoversion](../../includes/ssisnoversion-md.md)] doesn't have a separate process for a named instance.)|**Log on as a service** (SeServiceLogonRight)<br /><br /> Permission to write to application event log.<br /><br /> **Bypass traverse checking** (SeChangeNotifyPrivilege)<br /><br /> **Impersonate a client after authentication** (SeImpersonatePrivilege)|
249
249
|**Full-text search:**<br /><br /> (All rights are granted to the per-service SID. Default instance: `NT Service\MSSQLFDLauncher`. Named instance: `NT Service\ MSSQLFDLauncher$<instance_name>`.)|**Log on as a service** (SeServiceLogonRight)<br /><br /> **Adjust memory quotas for a process** (SeIncreaseQuotaPrivilege)<br /><br /> **Bypass traverse checking** (SeChangeNotifyPrivilege)|
@@ -484,7 +484,7 @@ The account specified during setup is provisioned as a member of the **RSExecRol
484
484
485
485
### <aid="SSAS"></a> SSAS provisioning
486
486
487
-
[!INCLUDE[ssAS](../../includes/ssas-md.md)] service account requirements vary depending on how you deploy the server. If you're installing [!INCLUDE[ssGeminiShort](../../includes/ssgeminishort-md.md)], SQL Server Setup requires that you configure the [!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] service to run under a domain account. Domain accounts are required to support the managed account facility that is built into SharePoint. For this reason, SQL Server Setup doesn't provide a default service account, such as a virtual account, for a [!INCLUDE[ssGeminiShort](../../includes/ssgeminishort-md.md)] installation. For more information about provisioning [!INCLUDE[ssGemini](../../includes/ssgemini-md.md)] for SharePoint, see [Configure Power Pivot Service Accounts](/analysis-services/power-pivot-sharepoint/configure-power-pivot-service-accounts).
487
+
[!INCLUDE[ssAS](../../includes/ssas-md.md)] service account requirements vary depending on how you deploy the server. If you're installing [!INCLUDE[power-pivot-sharepoint-md](../../includes/power-pivot-sharepoint-md.md)], SQL Server Setup requires that you configure the [!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] service to run under a domain account. Domain accounts are required to support the managed account facility that is built into SharePoint. For this reason, SQL Server Setup doesn't provide a default service account, such as a virtual account, for a [!INCLUDE[power-pivot-sharepoint-md](../../includes/power-pivot-sharepoint-md.md)] installation. For more information about provisioning [!INCLUDE[power-pivot-md](../../includes/power-pivot-md.md)] for SharePoint, see [Configure Power Pivot Service Accounts](/analysis-services/power-pivot-sharepoint/configure-power-pivot-service-accounts).
488
488
489
489
For all other standalone [!INCLUDE[ssAS](../../includes/ssas-md.md)] installations, you can provision the service to run under a domain account, built-in system account, managed account, or virtual account. For more information about account provisioning, see [Configure Service Accounts (Analysis Services)](/analysis-services/instances/configure-service-accounts-analysis-services).
490
490
@@ -567,7 +567,7 @@ Instance-aware services in SQL Server include the following:
Analysis Services in SharePoint integrated mode runs as '[!INCLUDE[ssGemini](../../includes/ssgemini-md.md)]' as a single, named instance. The instance name is fixed. You can't specify a different name. You can install only one instance of Analysis Services running as '[!INCLUDE[ssGemini](../../includes/ssgemini-md.md)]' on each physical server.
570
+
Analysis Services in SharePoint integrated mode runs as '[!INCLUDE[power-pivot-md](../../includes/power-pivot-md.md)]' as a single, named instance. The instance name is fixed. You can't specify a different name. You can install only one instance of Analysis Services running as '[!INCLUDE[power-pivot-md](../../includes/power-pivot-md.md)]' on each physical server.
Copy file name to clipboardExpand all lines: docs/database-engine/install-windows/install-sql-server-from-the-command-prompt.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -968,8 +968,8 @@ The `AllFeatures_WithDefaults` role is the default behavior for editions of [!IN
968
968
969
969
|Role|Description|Installs...|
970
970
|---|---|---|
971
-
|`SPI_AS_ExistingFarm`|Installs [!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] as a [!INCLUDE[ssGemini](../../includes/ssgemini-md.md)] named instance on an existing [!INCLUDE[SPS2010](../../includes/sps2010-md.md)] farm or standalone server.|[!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] calculation engine, preconfigured for in-memory data storage and processing.<br /><br />[!INCLUDE[ssGemini](../../includes/ssgemini-md.md)] solution packages<br /><br />Installer program for the [!INCLUDE[ssGeminiClient](../../includes/ssgeminiclient-md.md)]<br /><br />[!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Books Online|
972
-
|`SPI_AS_NewFarm`|Installs [!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] and [!INCLUDE[ssDE](../../includes/ssde-md.md)] as a [!INCLUDE[ssGemini](../../includes/ssgemini-md.md)] named instance on a new, unconfigured Office [!INCLUDE[SPS2010](../../includes/sps2010-md.md)] farm or standalone server. [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Setup will configure the farm during feature role installation.|[!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] calculation engine, preconfigured for in-memory data storage and processing.<br /><br />[!INCLUDE[ssGemini](../../includes/ssgemini-md.md)] solution packages<br /><br />[!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Books Online<br /><br />[!INCLUDE[ssDE](../../includes/ssde-md.md)]<br /><br />Configuration Tools<br /><br />[!INCLUDE[ssManStudioFull](../../includes/ssmanstudiofull-md.md)]|
971
+
|`SPI_AS_ExistingFarm`|Installs [!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] as a [!INCLUDE[power-pivot-md](../../includes/power-pivot-md.md)] named instance on an existing [!INCLUDE[SPS2010](../../includes/sps2010-md.md)] farm or standalone server.|[!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] calculation engine, preconfigured for in-memory data storage and processing.<br /><br />[!INCLUDE[power-pivot-md](../../includes/power-pivot-md.md)] solution packages<br /><br />Installer program for the [!INCLUDE[power-pivot-excel-md](../../includes/power-pivot-excel-md.md)]<br /><br />[!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Books Online|
972
+
|`SPI_AS_NewFarm`|Installs [!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] and [!INCLUDE[ssDE](../../includes/ssde-md.md)] as a [!INCLUDE[power-pivot-md](../../includes/power-pivot-md.md)] named instance on a new, unconfigured Office [!INCLUDE[SPS2010](../../includes/sps2010-md.md)] farm or standalone server. [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Setup will configure the farm during feature role installation.|[!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] calculation engine, preconfigured for in-memory data storage and processing.<br /><br />[!INCLUDE[power-pivot-md](../../includes/power-pivot-md.md)] solution packages<br /><br />[!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Books Online<br /><br />[!INCLUDE[ssDE](../../includes/ssde-md.md)]<br /><br />Configuration Tools<br /><br />[!INCLUDE[ssManStudioFull](../../includes/ssmanstudiofull-md.md)]|
973
973
|`AllFeatures_WithDefaults`|Installs all features that are available with the current edition.<br /><br />Adds the current user to the [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] **sysadmin** fixed server role.<br /><br />On [!INCLUDE[winserver2008](../../includes/winserver2008-md.md)] or higher and when the operating system isn't a domain controller, the [!INCLUDE[ssDE](../../includes/ssde-md.md)], and [!INCLUDE[ssRSnoversion](../../includes/ssrsnoversion-md.md)] are defaulted to use the `NT AUTHORITY\NETWORK SERVICE` account, and [!INCLUDE[ssISnoversion](../../includes/ssisnoversion-md.md)] is defaulted to use the `NT AUTHORITY\NETWORK SERVICE` account.<br /><br />This role is enabled by default in editions of [!INCLUDE[ssExpress](../../includes/ssexpress-md.md)]. For all other editions, this role isn't enabled but can be specified through the UI or with command-line parameters.|For editions of [!INCLUDE[ssExpress](../../includes/ssexpress-md.md)], installs only those features available in the edition. For other editions, installs all [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] features.<br /><br />The `AllFeatures_WithDefaults` parameter can be combined with other parameters that override the `AllFeatures_WithDefaults` parameter settings. For example, using the `AllFeatures_WithDefaults` parameter and the `/Features=RS` parameter overrides the command to install all features and only installs [!INCLUDE[ssRSnoversion](../../includes/ssrsnoversion-md.md)], but honors the `AllFeatures_WithDefaults` parameter to use the default service account for [!INCLUDE[ssRSnoversion](../../includes/ssrsnoversion-md.md)].<br /><br />When using the `AllFeatures_WithDefaults` parameter along with the `/ADDCURRENTUSERASSQLADMIN=FALSE` the provisioning dialog isn't auto populated with the current user. Add `/AGTSVCACCOUNT` and `/AGTSVCPASSWORD` to specify a service account and password for the [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Agent.|
974
974
975
975
## <aid="RollOwnership"></a> Control failover behavior using the /FAILOVERCLUSTERROLLOWNERSHIP parameter
Copy file name to clipboardExpand all lines: docs/database-engine/install-windows/install-sql-server.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -101,7 +101,7 @@ Other [!INCLUDE[ssnoversion](../../includes/ssnoversion-md.md)] components can b
101
101
|Article|Description|
102
102
|-----------|-----------------|
103
103
|[Configure Windows Firewall (SQL Server)](../../sql-server/install/configure-the-windows-firewall-to-allow-sql-server-access.md)|Overview of firewall configuration and how to configure the Windows firewall to allow access to [!INCLUDE[ssnoversion](../../includes/ssnoversion-md.md)].|
104
-
|[Configure the Windows Firewall (SSAS)](/analysis-services/instances/configure-the-windows-firewall-to-allow-analysis-services-access)|Configure both port and firewall settings to allow access to [!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] or [!INCLUDE[ssGemini](../../includes/ssgemini-md.md)] for SharePoint.|
104
+
|[Configure the Windows Firewall (SSAS)](/analysis-services/instances/configure-the-windows-firewall-to-allow-analysis-services-access)|Configure both port and firewall settings to allow access to [!INCLUDE[ssASnoversion](../../includes/ssasnoversion-md.md)] or [!INCLUDE[power-pivot-md](../../includes/power-pivot-md.md)] for SharePoint.|
105
105
|[Configure a Multi-Homed Computer](../../sql-server/install/configure-a-multi-homed-computer-for-sql-server-access.md)|Configure [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] and Windows Firewall with Advanced Security to provide for network connections to an instance of [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] in a multi-homed environment.|
0 commit comments