相关文章推荐

I see NT AUTHORITY\NETWORK Service and NT AUTHORITY\System under logins in SSMS. Which account NT AUTHORITY\LocalService is mapped to in sql server ?

Appreciate your help. Thank you.

I haven't witnessed anyone using the Local Service account (NT AUTHORITY\LocalService) to run the SQL Server Agent service, and as it isn't supported I wouldn't recommend using it.

See the link below for the supported service account types

https://docs.microsoft.com/en-us/sql/ssms/agent/select-an-account-for-the-sql-server-agent-service?view=sql-server-2017#supported-service-account-types


Blog: https://thesystemcenterblog.com LinkedIn:

The NT AUTHORITY\LOCAL SERVICE is just a built-in Windows service account.

It can be used to start and run, each service in SQL Server must have an account configured during installation. Startup accounts used to start and run SQL Server can be built-in system accounts, local user accounts, or domain user accounts.

The Local Service account is a built-in account that has the same level of access to resources and objects as members of the Users group. This limited access helps safeguard the system if individual services or processes are compromised. Services that run as the Local Service account access network resources as a null session without credentials. Be aware that the Local Service account is not supported for the SQL Server or SQL Server Agent services. The actual name of the account is "NT AUTHORITY\LOCAL SERVICE".

Best regards,
Leon


Blog: https://thesystemcenterblog.com LinkedIn:

The NT AUTHORITY\LOCAL SERVICE is just a built-in Windows service account.

Be aware that the Local Service account is not supported for the SQL Server or SQL Server Agent services. The actual name of the account is "NT AUTHORITY\LOCAL SERVICE".

Best regards,

Blog: https://thesystemcenterblog.com LinkedIn:

Thank you Leon for your response !!

I changed the service account for SQL Server Agent service to Local Service and bounced the service, it worked without any issue. Not sure why it worked as same is not supported as per MSDN. I did it on SQL Server 2017.

Just to be sure, local system and network service are also build in account but i could see them under Logins. On one machine SQL Server agent works with local service account but on another machine it just don't work.

I don't think permission is the issue, still is there a way to grant more permission to local service. We may not change the service account for many reasons ?

Appreciate your insight !!

 
推荐文章