Summary
In this chapter, you looked at security from both the service and user perspectives. Each of these groups has different requirements for ensuring a secure SQL Server, but they both require that the minimum level of privileges be assigned to a particular user or role.
You should choose service accounts to run SQL Server that ensure the various subsystems of SQL Server run properly, but only grant them the minimum amount of privileges needed to run the software. This is because of their global access to the SQL Server software.
You should configure the overall SQL Server service with a minimum surface area exposed to attack and unnecessary services and features disabled.
Users should be added to SQL Server using groups and roles with the ...
Get MCITP Administrator: Microsoft® SQL Server™ 2005 Optimization and Maintenance (70-444): Study Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
