Hi there,
BOL notes that in order for replication agents to run properly, the
SQLServerAgent must run as a domain account which has privledges to log
into the other machines involved in replication (under "Security
Considerations" and elsewhere). This makes sense; however, I was
wondering if there were any repercussions to using duplicate local
accounts to establish replication where a domain was not available.
Anotherwords, create a local windows account "johndoe" on both machines
(with the same password), grant that account access to SQL Server on
both machines, and then have SQL Server Agent run as "johndoe" on both
machines. I do not feel this is an ideal solution but I have
circumstances under which I may not have a domain available; my
preliminary tests seem to work.
Also, are there any similar considerations regarding the MSSQLSERVER
service, or can I always leave that as local system?
Dave
1  4029 
"Dave C." <me***@rules.sp am> wrote in message news:<Pi******* *************** *************** *@ccrma-gate.stanford.e du>... Hi there,
BOL notes that in order for replication agents to run properly, the
SQLServerAgent must run as a domain account which has privledges to log
into the other machines involved in replication (under "Security
Considerations" and elsewhere). This makes sense; however, I was
wondering if there were any repercussions to using duplicate local
accounts to establish replication where a domain was not available.
Anotherwords, create a local windows account "johndoe" on both machines
(with the same password), grant that account access to SQL Server on
both machines, and then have SQL Server Agent run as "johndoe" on both
machines. I do not feel this is an ideal solution but I have
circumstances under which I may not have a domain available; my
preliminary tests seem to work.
Also, are there any similar considerations regarding the MSSQLSERVER
service, or can I always leave that as local system?
Dave
See "Setting up Windows Services Accounts" in BOL. There are a number
of things that can only be done with a domain account; in addition,
LocalSystem is a highly privileged account, so for both functionality
and security reasons, using a domain account is usually a good idea.
I'm not sure about using multiple local accounts if no domain is
available. I would guess that it would work, but password management
and synchronization could be awkward.
Simon This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: Kona |
last post by:
Hello,
My server is part of a W2K domain. What do you advice me as account to
run my SQL*Server, service started with a domain user account or as
local system ?
I need advices from a security point of view.
Thank's in advance
|
by: SL |
last post by:
How do I set up access to a file on a Windows Server 2003
Domain Controller that also has IIS? The file sits on
another server. The Domain Controller / IIS server
connects to this file through a share. Domain controllers
have no local users so ASPNET user is not available.
Microsoft states, "On Windows 2003 domain controller
servers, ASP.NET applications run under the NETWORK
SERVICE identity (regardless of the IIS isolation mode)....
|
by: Stephen Costanzo |
last post by:
When I log onto my workstation, I select my system domain (KRUSTY -- can you tell we have simpson fans as networking??) and my user name, so when I look at the CTRL+ALT+DEL screen it is KRUSTY\scostanz. However when I do
sTemp = Environment.UserDomainName & "\" & Environment.UserName
sTemp is = "SCOSTANZO-XP\scostanz" which is my computer name and my user name. Is there another namespace I should be hitting? I remember that there was an API...
|
by: Martin Robins |
last post by:
I need to access the scheduler service on a network computer in order to manipulate it remotely from .NET; I have all of the necessary code to perform the manipulation and it works - great - but I am having problems with authentication.
I have tried using LogonUser and this works fine with a domain account, however it is not possible to use this with an account that is defined only on the remote computer - it only works with local or domain...
|
by: Rocky |
last post by:
Hi,
I have a webform, with 2 textboxs and a submit button. In the text box1, i
enter a username and in textbox2 I enter the computer name. Both the username
and computer name is in active directory.
When i click submit, I want to add the username from textbox1 into the local
administrators group on the computer name from textbox2.
I want to do this in asp.net using vb.net as the programming language.
| | |
by: Chris Davoli |
last post by:
We are changing from using SQL accounts in our connection string to use NT
domain accounts. I have found some coe which I am using successfully on my
local machine, because the installed account ie; MachineName\ASPNET is what I
use in my VS2005 environment and this works great connecting locally to my
local SQL Server DB, since it is one of the accounts that I have locally as a
user in SQL Server.
The problem is when I try to connect to...
|
by: Chad Dressler |
last post by:
I'm trying to use System.DirectoryServices to add a domain user to a
local group via a web application which runs under the identity of a
local admin account. Is this possible?
I can successfully add domain users if I run the application under the
identity of a domain account with administrative privileges on the
local machine (or use windows auth with impersonation), but if I try to
run it under a local account rather than a domain...
|
by: Michael Howes |
last post by:
I'm writing a utility to manage a machines *local* accounts in c#
I am getting all the users in a specific Group just fine but when I
want to get some of the information on each user from their Properties
collection I can't get the properties on some users.
For example, I get all the users that are part of my machines
Administrators Group. I get get the properties of the built in local
Administrator account and some local IT account,...
|
by: Philip Nelson |
last post by:
I'm a UNIX person who is having difficulty understanding Windows security.
I've got to install a DB2 server (initially Express-C) in a Windows domain
environment.
I fire up the installer and everything goes fine until I come to create the
user IDs for the instance. I read that the recommended way is to use a
Local Domain account (not a local system account), but whatever I try it
won't let me create an account locally (always says...
|
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
| | |
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one.
At the time of converting from word file to html my equations which are in the word document file was convert into image.
Globals.ThisAddIn.Application.ActiveDocument.Select();...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
|
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
| | |
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |
