SQL Server Forums
Profile | Register | Active Topics | Members | Search | Forum FAQ
 
Register Now and get your question answered!
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 SQL Server 2012 Forums
 SQL Server Administration (2012)
 good or bad idea, share a service account
 New Topic  Reply to Topic
 Printer Friendly
Author Previous Topic Topic Next Topic  

Hommer
Aged Yak Warrior

786 Posts

Posted - 02/20/2014 :  14:01:00  Show Profile  Reply with Quote
Hi,

I have a default instance and a named instance sql2012 on the same box. Both will be production dbs.

The sql server service is running under sql account, and I need to change it over to domain windows service account.

My question is what are the pros and cons of sharing a same service account?

Thanks!

tkizer
Almighty SQL Goddess

USA
36845 Posts

Posted - 02/20/2014 :  14:53:51  Show Profile  Visit tkizer's Homepage  Reply with Quote
I think on the same box is fine, provided it doesn't have elevated permissions. If it does have elevated permissions, then you'd need to consider what that means for the instances if you are using xp_cmdshell and who has sysadmin access on the instances.

For different boxes, I recommend different domain accounts that way if your account gets compromised you don't have to make tons of changes. This happened to us a couple of years ago. We had to change hundreds of servers when our account got hacked by a sophisticated hacker. Just the account got hacked, not the servers. If it happens in the future, we would only need to change one server per account that was compromised.

Tara Kizer
SQL Server MVP since 2007
http://weblogs.sqlteam.com/tarad/
Go to Top of Page
  Previous Topic Topic Next Topic  
 New Topic  Reply to Topic
 Printer Friendly
Jump To:
SQL Server Forums © 2000-2009 SQLTeam Publishing, LLC Go To Top Of Page
This page was generated in 0.02 seconds. Powered By: Snitz Forums 2000