[sims] SQL 2008 AD groups

[randle]

Hi,

 

I've recently merged our admin and curriculum network together. The old admin FR server was also the SIMS server and so when I migrated to SQL Server 2008 to host SIMS a while back, it created a number of groups within AD. However the SIMS server has now been demoted to a member server and joined to our curriculum network so these groups no longer exist within AD.

 

I have since found out that the 2008 SQL install adds the following groups with stated members:

 

SQLServerMSSQLServerADHelperUser$SERVER_NAME

NT AUTHORITY\NETWORK SERVICE

NT AUTHORITY\SYSTEM

 

SQLServerMSSQLUser$server_name$SIMS2008

NT AUTHORITY\SYSTEM

 

SQLServerSQLAgentUser$SERVER_NAME$SIMS2008

NT AUTHORITY\NETWORK SERVICE

 

SQLServer2005SQLBrowserUser$SERVER_NAME

 

I have Two questions

 

1. Should all these groups be present within AD or "Local Users and Groups->Groups"?

 

2. What users/groups should be a member of each of these?

 

TIA

[PiqueABoo]

AIUI: Unless you are clustering on member servers/workstations all the SQL groups are local groups. You only get domain groups on a DC because the SQL install has no other options i.e. it can't make & use local groups on a domain controller.

 

I've only got an Express to hand used for something else, but that is the same local groups & members as you listed plus:

 

SQLServer2005SQLBrowserUser$SERVER_NAME

NT AUTHORITY\LOCAL SERVICE

 

SQLServerFDHostUser$SERVER_NAME$INSTANCE_NAME

 

SQLServerReportServerUser$SERVER_NAME$MSRS10.INSTANCE_NAME

NT AUTHORITY\SYSTEM

[randle]

Many thanks for that. I've added them to the Local users & groups section of the server along with your additions (I also have reporting installed) and will just have to wait and see what happens during the next upgrade