Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

what should the logon be for SQL Agent? 1

Status
Not open for further replies.

Rousseau10

Programmer
Feb 22, 2005
242
US
I get a message when runnig the replication wizard saying replication will fail becuase I am using the system account for SQL Agent startup.

What exactly is the system account anyway?

So anyway I go to the logon tab in sql agent properties applet in services in control panel and click the radio button to use the specified account. So I use an administrator
logon and password for my local machine (not on a domain).
Of corse when I try to start SQL Agent it fails. What should I be using, do I make an account in sql server or is this a local system account for this computer?

It give me option of user or built-in security principal, what are these accounts exactly anyway? I am mostly a programmer and this administrator stuff is new to me.

And for that matter what does system mean in the context of accounts? this local computer???


Thanks!!!


I am being trained by experts to be an experts trainer :) Newbee - Adam
 
HI,
system account means local administrative account usually members of built_in administrators group are system accounts. They can access and manage local machine's resources but cannot access other machines.

SQL Agent login account is used for synchronyzation in replication which in tern require distributor to access publisher as well as subscriber. Agent should run under account that has permissions on all the machines that are involved in replicatoin.

Just use domain administrative account for Sql agent services.

B.R,
miq
 
great answer, One thing though I need to train replication in a class room workgroup environment, how can the sql agent account have permissios on all machines in workgroup???

Tanks

I am being trained by experts to be an experts trainer :) Newbee - Adam
 
First never use a domain admin account to run either of the SQL Services. Doing so opens a major security hole. In the event that someone breaks into your SQL Server if the services are running under a domain admin account, that person now has domain admin rights to your domain.

The system account is a special account that many services run under. If you open task manager you'll see that many programs are running under the system account. When a service or program runs under the system account it has the equilivent of administrator rights on the machine, but has no rights to other machines on the domain.

In order to give your SQL Agent account rights to all machines in a workgroup, you will need to create the same account on each machine in the workgroup. I would recommend setting up a domain for the classroom and creating a domain account.

Denny
MCSA (2003) / MCDBA (SQL 2000)

--Anything is possible. All it takes is a little research. (Me)

[noevil]
(My very old site)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top