Configure Standard Accounts - SQL-FineBuild/Common GitHub Wiki
| Previous Configure Notification Services Instance | Manual Configuration | Configure Sysadmin Accounts Next |
|---|
FineBuild can configure a number of standard Windows accounts should be added to SQL Server.
Details of the accounts that are added is given below:
| Account Description |
|---|
| Account that is running the SQL FineBuild install process |
| DBA Team Sysadmin group |
| DBA Team Non-Sysadmin group |
| Windows Network Service account |
| SQL Server Service account |
| SQL Agent Service account |
Security Compliance
Standard Accounts configuration helps to focus SQL DB Engine administration rights on to the DBA Team. If you setup Security Compliance then Standard Accounts configuration will always be implemented.
FineBuild Configure Standard Accounts
The Standard Accounts configuration relates to Process Id 5CA and is controlled by the parameters below:
| SQL Version | Parameter | FULL Build | WORKSTATION Build | CLIENT Build |
|---|---|---|---|---|
| SQL2019 | /SetupStdAccounts: | Yes | Yes | N/A |
| SQL2017 | /SetupStdAccounts: | Yes | Yes | N/A |
| SQL2016 | /SetupStdAccounts: | Yes | Yes | N/A |
| SQL2014 | /SetupStdAccounts: | Yes | Yes | N/A |
| SQL2012 | /SetupStdAccounts: | Yes | Yes | N/A |
| SQL2008R2 | /SetupStdAccounts: | Yes | Yes | N/A |
| SQL2008 | /SetupStdAccounts: | Yes | Yes | N/A |
| SQL2005 | /SetupStdAccounts: | Yes | Yes | N/A |
In order to maintain compatibility with older versions of SQL FineBuild, the parameter /ConfigStdAccounts: can also be used.
FineBuild also uses the following parameters to help Configure Standard Accounts:
| Parameter | Default Value | Description |
|---|---|---|
| /GroupDBA: | GBGGDBAS01 | DBA Team Sysadmin group |
| /GroupDBANonSA: | GBGGDBAN01 | DBA Team Non-Sysadmin group |
| /SQLSvcAccount: | none | SQL Server Service account |
| /AgtSvcAccount: | none | SQL Agent Service account |
FineBuild will automatically add these accounts to SQL Server.
Manual Configure Standard Accounts
The following steps show what you would have to do for manual Standard Accounts configuration. FineBuild does all of this work for you automatically.
The same process is used to add all of these accounts.
-
Use SQL Server Management Studio to connect to the SQL instance
Navigate to Logins and select New Login
-
Click Search to identify the new login
-
Use the process Find Group on Domain or Find User on Domain with each of the accounts listed above to add them to SQL Server
Copyright FineBuild Team © 2013 - 2020. License and Acknowledgements
| Previous Configure Notification Services Instance | Top | Configure Sysadmin Accounts Next |
|---|