views:

43

answers:

3

Hi,

i am preparing for Microsoft exam 70-432 SQL Server 2008 . In the book i read, its highly recommended that you use separate log-in for each SQL Service. But i am unable to understand what is a benefit in using separate USER?

Please let me know if anyone has an idea about this.

Regards, fayalif

A: 

The benefit is that if somehow someone manages to take control of one of the services he will not have access to the other ones.

Giorgi
Furthermore, using a separate user for each service allows a more fine-grained specification of access writes.
mort
A: 

What Giorgi said and that the different services require different rights.

By using different accounts these individual accounts have as little rights as possible. Combining these accounts by using one account a malicious user could obtain enough rights to do damage.

rdkleine
A: 

SQL Server 2005 Security Best Practices

When choosing service accounts, consider the principle of least privilege. The service account should have exactly the privileges that it needs to do its job and no more privileges. You also need to consider account isolation; the service accounts should not only be different from one another, they should not be used by any other service on the same server.

This is only a short excerpt - you should read entire Service Account Selection and Management section.

Marek Grzenkowicz