Creating a SQL login account

Article:HOWTO57948  |  Created: 2011-08-01  |  Updated: 2013-07-12  |  Article URL http://www.symantec.com/docs/HOWTO57948
Article Type
How To


Subject


Creating a SQL login account

The Vault Service account must have a SQL login account for the SQL Server, with the required permissions.

To create a SQL login account in SQL Server 2005

  1. Start SQL Server Management Studio.

  2. In the tree, select Security>Logins.

  3. Right-click Logins, and select New Login.

  4. Either type in the Vault Service account as domain\username or click Search and search for the account. In the search dialog box, ensure that the correct domain is entered in the Locations box.

  5. Select Windows authentication.

  6. In the tree, click Server roles.

  7. Select the check box beside dbcreator.

  8. Click OK.

  9. In the toolbar, click New Query.

  10. Enter the following script:

    use Master
    GRANT VIEW SERVER STATE TO "domain\vsa_account"
    GO
    

    where domain\vsa_account is the domain and name of the Vault Service account.

  11. Click Execute.

  12. You can check that the Vault Service account has the dbcreator role as follows:

    • In the tree, select Security>Server Roles.

    • In the right-hand pane, double-click the dbcreator role.

    • The Vault Service account should be displayed in the membership list.

  13. You can check that the Vault Service account has VIEW SERVER STATE permission as follows:

    • In the tree, right-click the top level SQL Server object and select Properties.

    • Select the Permissions page.

    • Under Logins or roles, select the Vault Service account and then click Effective Permissions. Check that VIEW SERVER STATE is included in the list of permissions.

To create a SQL login account in SQL Server 2008 or SQL Server 2012

  1. Start SQL Server Management Studio.

  2. In the tree, select Security>Logins.

  3. Right-click Logins, and select New Login.

  4. Either type in the Vault Service account as domain\username or click Search and search for the account. In the search dialog box, ensure that the correct domain is entered in the Locations box.

  5. Select Windows authentication.

  6. In the tree, click Server roles.

  7. Select the check box beside dbcreator.

  8. Click OK.

  9. In the toolbar, click New Query.

  10. Enter the following script:

    use Master
    GRANT VIEW SERVER STATE TO "domain\vsa_account"
    GRANT ALTER ANY LOGIN TO "domain\vsa_account"
    GO
    

    where domain\vsa_account is the domain and name of the Vault Service account.

  11. Click Execute.

  12. You can check that the Vault Service account has the dbcreator role as follows:

    • In the tree, select Security > Server Roles.

    • In the right-hand pane, double-click the dbcreator role.

    • The Vault Service account should be displayed in the membership list.

  13. You can check that the Vault Service account has VIEW SERVER STATE and ALTER ANY LOGIN permissions as follows:

    • In the tree, right-click the top level SQL Server object and select Properties.

    • Select the Permissions page.

    • Under Logins or roles, select the Vault Service account and then click Effective Permissions. Check that VIEW SERVER STATE and ALTER ANY LOGIN are included in the list of permissions.

See Preinstallation tasks for Enterprise Vault server

See Creating the Vault Service account

See About assigning permissions and roles in SQL databases

See Creating Enterprise Vault DNS aliases

See Turning off or reconfiguring Windows Firewall


Legacy ID



v8927483_v41328148


Article URL http://www.symantec.com/docs/HOWTO57948


Terms of use for this information are found in Legal Notices