3 Replies Latest reply on Jul 22, 2014 3:11 PM by pcombellick

    The SA Account fro SQL Server for AF Database

    mikeloria

      Our corporate standard is calling for the disablement of the SA account for our AF servers. We have a collective of 2 (primary and secondary) so they must remain in sync with one another. Does someone know if this will cause any issues witht he PI system to disable the SA accounts? If yes, is there and documented changes to run with the SA accounts on the servers to be disabled? Thank You

        • Re: The SA Account fro SQL Server for AF Database
          pcombellick

          SQL Authentication can be used with AF but is not necessary.  For an AF Collective, the Windows account that runs the SQL Agent on the primary SQL Server needs adequate privileges on the primary and secondary SQL Servers.

          • Re: The SA Account fro SQL Server for AF Database
            Roger Palmen

            AF does not require the use of the SA account. It is not a recommended practice anyway. But this al depends on your configuration. If you installed AF making use of the SA account, then you'll need to change that.

             

             

             

            EDIT: forgot to refresh... not the first one to answer.

              • Re: The SA Account fro SQL Server for AF Database
                pcombellick

                There are a couple of scenarios where SysAdmin privilege is required.  (1) some install scenarios require SysAdmin privilege while the install is running, (2) the users that are configuring or modifying an AF Collective need the SysAdmin privilege.

                 

                In general, I would disable SQL Authentication.  However, before disabling SQL Authentication or the "sa" account, make sure that a Windows account or group has the SysAdmin privilege.  (Otherwise, you will have the opportunity to practice uninstall then install of SQL Server.)

                 

                I would strongly recommend never configuring an application with SysAdmin privilege ( and never running the SQL Server service as a privileged user, such as LOCAL SYSTEM, local admin, or domain admin.)

                 

                 

                 

                Paul

                 

                AF SQL Dev