Db service account

[pinkpanther56]

I'm instlling a DB app based on SQLAnywhere due to resources and being a small environment it will be on a DC, the service installs and runs as local 'system'. Am i better off configuring an ordinary 'domain user' account to run the service under?

Running on 2003 R2 SP2.

Thanks.

 

[tfg13]

That would be a good idea from a security standpoint. What I mean is, if SQLAnywhere is compromised, you have limited what files (you should only give this account permissions to files it needs) the attacker has access to. If it were the system account, then you could be in deep trouble, and end up with an "pwned" system, and that is never good.