SQL Server Integration Services Service Account Recommendations

Summary

It is recommended to run the SQL Server Integration Services service under an account that has limited permissions such as the Network Service account, which is the default. Running the SQL Server Integration Services service under a highly-priveleged account represents a potential security risk.

For more information regarding configuring Windows service accounts for SQL Server, see the following Books Online article:

Setting Up Windows Service Accounts

More Information

For more information about the products or tools that automatically check for this condition on your instance of SQL Server and on the versions of the SQL Server product, see the following table:

Rule softwareRule titleRule descriptionProduct versions against which the rule is evaluated 
SQL Server 2008 R2 Best Practice Analyzer (SQL Server 2008 R2 BPA)

SQL Server Integration Services Recommended Account 


The SQL Server 2008 R2 Best Practice Analyzer (SQL Server 2008 R2 BPA) provides a rule to detect whether the Integration Services service account is running under an unrecommended account. The SQL Server 2008 R2 BPA supports both SQL Server 2008 and SQL Server 2008 R2. If you run the BPA tool and encounter a Warning with the title of Unrecommended Integration Services service account detected, then your SQL Server Integration Services service is running under an account other than the Network Service account or is a highly-privileged account.SQL Server 2008
SQL Server 2008 R2



SQL Server 2012 Best Practice Analyzer (SQL Server 2012 BPA)
SQL Server Integration Services Recommended Account 

The SQL Server 2012 Best Practice Analyzer (SQL Server 2012 BPA) provides a rule to detect whether the Integration Services service account is running under an unrecommended account.If you run the BPA tool and encounter a Warning with the title of Unrecommended Integration Services service account detected, then your SQL Server Integration Services service is running under an account other than the Network Service account or is a highly-privileged account.SQL Server 2012 






Proprietà

ID articolo: 2027684 - Ultima revisione: 02 apr 2012 - Revisione: 1

Feedback