Setup Folder Permissions - SQL-FineBuild/Common GitHub Wiki
Setup All Users Temp Folder | Manual Install | SQL Install Next |
---|
FineBuild can set permissions for the folders it has created, so that access is limited to only those accounts that need to use them.
Folder permissions can be applied by FineBuild, or enforced via a File and Folder GPO.
The configuration shown on this page relate to a Main Instance Server Build. A subset of these folders will have been created for other types of build.
FineBuild Folder Permissions Processing
Processing of Folder Permissions relates to Process Id 1G in the FineBuild1Preparation script, and is always performed.
FineBuild uses the following parameters to help setup the folder permissions:
Parameter | Description |
---|---|
/GroupDBA: | Windows group for DBAs that should have SQL Server sysadmin access |
/GroupDBANonSA: | Windows group for DBAs that does not use sysadmin access |
Manual Setup Folder Permissions Processing
The following steps show what you would have to do to setup Folder Permissions manually. FineBuild does all of this work for you automatically.
The permissions shown below should be set, using drive letters suitable for your install:
Folder | Permission | User / Group |
---|---|---|
E:\DBAFiles | Full Control | DBA Sysadmin Group |
DBA Non-Admin Group | ||
(local) Administrators | ||
Read | (local) Users | |
E:\Program Files | Full Control | DBA Sysadmin Group |
SQL Service Accounts | ||
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
F:\SQLFiles | Full Control | DBA Sysadmin Group |
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
I:\SQLFiles | Full Control | DBA Sysadmin Group |
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
J:\SQLFiles | Full Control | DBA Sysadmin Group |
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
K:\SQLFiles | Full Control | DBA Sysadmin Group |
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
T:\SQLFiles | Full Control | DBA Sysadmin Group |
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
F:\SQLFiles\MSSQL.MSSQLSERVER.FTData | Full Control | DBA Sysadmin Group |
SQL Service Accounts | ||
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
I:\SQLFiles\MSSQL.MSSQLSERVER.Backup | Full Control | DBA Sysadmin Group |
SQL Service Accounts | ||
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
J:\SQLFiles\MSSQL.MSSQLSERVER.Log | Full Control | DBA Sysadmin Group |
SQL Service Accounts | ||
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
K:\SQLFiles\MSSQL.MSSQLSERVER.Data | Full Control | DBA Sysadmin Group |
SQL Service Accounts | ||
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
K:\SQLFiles\MSSQL.MSSQLSERVER.Log | Full Control | DBA Sysadmin Group |
SQL Service Accounts | ||
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
T:\SQLFiles\MSSQL.MSSQLSERVER.Data | Full Control | DBA Sysadmin Group |
SQL Service Accounts | ||
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
I:\SQLFiles\MSAS.MSSQLSERVER.Backup | Full Control | DBA Sysadmin Group |
SQL Service Accounts | ||
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
J:\SQLFiles\MSAS.MSSQLSERVER.Log | Full Control | DBA Sysadmin Group |
SQL Service Accounts | ||
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
K:\SQLFiles\MSAS.MSSQLSERVER.Data | Full Control | DBA Sysadmin Group |
SQL Service Accounts | ||
(local) Administrators | ||
Read | DBA Non-Admin Group | |
(local) Users | ||
T:\Temp | Full Control | SYSTEM |
NETWORK SERVICE | ||
DBA Sysadmin Group | ||
DBA Non-Admin Group | ||
SQL Service Accounts | ||
(local) Administrators | ||
Modify | (local) Users |
Copyright FineBuild Team © 2014 - 2019. License and Acknowledgements
Previous Setup All Users Temp Folder | Top | SQL Install Next |
---|