Tuesday 5 February 2013

SQL Server - Installation - security prerequisites


SQL Server - Installation - security prerequisites


In order to run correctly, all SQL Server services accounts must respect some security prerequisites, according with Microsoft recommendations – in brackets, security privilege. Please add them manually or by scripts. These permissions are applied locally on the server for SQL Server domain or local services accounts:
Act as part of the operating system (SeTcbPrivilege)
Adjust memory quotas for a process (SeIncreaseQuotaPrivilege)
Bypass traverse checking (SeChangeNotifyPrivilege)
Create a token object (SeCreateTokenPrivilege)
Impersonate a client after authentication (SeImpersonatePrivilege)
Log on as a batch job (SeBatchLogonRight)
Log on as a service (SeServiceLogonRight)
Replace a process level token (SeAssignPrimaryTokenPrivilege)
Perform volume maintenance tasks(SeManageVolumeNamePrivilege)
Lock pages in memory (SeLockMemory)


Brgds,

Chhavinath Mishra
Database Administrator
Microsoft Certified IT Professional (MCITP)

3 comments: