For good purpose must we grant the necessary
rights towards these accounts. The required list of rights are as
follow on local policy:
-
- Logon as
Service
- Act as
part of the operating system (no longer required for SQL 2005 /
Windows Server 2003)
- Log on
as a batch job
- Replace
a process-level token
- Bypass
traverse checking
- Adjust
memory quotas for a process
- SQL
Agent
- Act as
part of the operating system
- Bypass
traverse checking
- Debug
programs
- Lock
pages in memory
- Log on
as a batch job
- Replace
a process level token
When installing the software, it will be done by
the setup program. But when hardening the system. You need to do
these steps.
1. Hardware
