Friday, February 17, 2012

database loginName question

Hi All,
Recently I got this notebook with Windows XP professional
OS. The notebook came with two default user
accounts, "Guest" and "User". I Changed the
generic "User" account name (only the name) to my
name "mitra". The account type for this user is "Computer
Administrator".
I logged on to my system with username "mitra" and tried
to install SQL Server 2000 Developer Edition.
During SQL Server 2000 Developer Edition install, on
Service Account screen, the setup asked to choose either
local system account or damain user account for the
microsoft services. Apparently by default, the setup
enters an account information for the domain user account
option.
It had ".\user" for the domain username and the notebook
name "PC123456789" for the domain name. I tried to
change ".\user" to ".\mitra" but setup refused to accept
it, don't know why. I continued with the setup and let
setup use the default user account and domain information
it already had. I should note here that even though my
notebook is not on a network and my user account is not
part of a domain group still i did not want to choose
the "Local System account" option because i read in Books
Online that there is some network access limitation with
the Local System option so i choose to go with domain
option, I guess that was the start of this problem i
encountered.
After I finished the installation i could not get the
MSSQL Server started. I kept getting the error
1069 "Service did not start due to a logon failure".
I tried to log on to EM and the same error.
I opened MSSQLSERVER Properties using Services window and
on "Log On" tab I changed the log on option to "Local
System account" and then i was able to start the service.
My first qeustion is, why SQL Server Setup accepted the
domain account information when it couldn't use it to log
on and to start the services? Second, why when i was
logged on to my notebook with username "mitra" it
had ".\user" for the domain user account name and setup
would not continue when i changed it to ".\mitra"
or "mitra"? Third, why now that i am logged on to my
notebook with the username "mitra" and create a new
database using the EM i see the loginName "PC123456789
\user" for the "dbo" when i expand the my new database
and click on Users?
I appreciate any comments that would help me to clear
understand why SQL Server is behaving this way.
Thanks,
--MitraBy default with SQL2K anyone that is a local administrator on your notebook
gets system administrator rights with SQL Server (this is via the builtin\ad
ministrator group). As you are using XP Pro your local PC name is a domain
(it just has only 1 PC in t
he "domain"). So, the [PC NAME]\user account (being in the local admini
strators group) is in the system administrators role within SQL2K. SQL syst
em administrators automatically get mapped to dbo (database owner) roles wit
hin all databases within the SQ
L Instance (this is by design).
So, in your case as the [PC NAME]\user account is an administrator on th
e notebook you are not reducing the security risk by running SQL Server in t
his security context over using "local system".

No comments:

Post a Comment