Article ID: 2160720 - View products that this article applies to.
Each service in SQL Server represents a process or a set of processes to manage authentication of SQL Server operations with Windows.Each service can be configured to use its own service account. This facility is exposed at installation. SQL Server provides a special tool, SQL Server Configuration Manager, to manage the services configuration.
When choosing service accounts, consider the principle of least privilege. The service account should have exactly the privileges that it needs to do its job and no more privileges. You also need to consider account isolation; the service accounts should not only be different from one another, they should not be used by any other service on the same server. Do not grant additional permissions to the SQL Server service account or the service groups. Permissions will be granted through group membership or granted directly to a service SID, where a service SID is supported. For more details please refer to Books Online Topic Setting Up Windows Service Accounts
During a new installation, SQL Server setup does not default SQL Server engine Service and SQL Server Agent service to any account. The account specification is required step for these services. For details on recommended secure accounts, refer to Books Online Topic Setting Up Windows Service Accounts
For changing the SQL Server service configuration like service account or service account password, always use SQL Server tools such as SQL Server Configuration Manager. For more information on using SQL Server Configuration Manager please refer to Books Online Topic SQL Server Configuration Manager
For more information, refer to the Security Whitepaper at http://www.microsoft.com/technet/prodtechnol/sql/2005/sql2005secbestpract.mspx
For more information about the products or tools that automatically check for this condition on your instance of SQL Server and on the versions of the SQL Server product, see the following table:
(http://go.microsoft.com/fwlink/?LinkId=151500)for other considerations.
Article ID: 2160720 - Last Review: April 3, 2012 - Revision: 2.0