When we use mysql data on windows servers, mysql runs with the system permission by default. if there is a security problem, hackers can escalate the privilege of creating users through mysql, therefore, it is necessary to install mysql on Windows to run MySQL with low permissions. by default, mysql runs with SYSTEM permissions, for example:
SYSTEM is a super administrator. Not required. We do not recommend that you use this permission to run any program.
This article demonstrates how to run MySQL under the GUEST account.
Step 1: Create an account belonging to the GUESTS Group, which is assumed to be: sqlserver
Step 2: Set the GUEST account to have the control permission for the MYSQL installation directory.
All accounts except the administrators, system, and sqlserver accounts can be deleted.
Step 3: Set the MYSQL service to start with sqlserver.
Choose "management tools"> "services", find "MySQL", right-click "properties", and select "log on" on the displayed tab"
The default logon identity is "local system account". now select "this account" and fill in sqlserver and the corresponding password.
Step 4: Restart the MYSQL service.
Find "MYSQL" in the service just now, right-click-"restart", and the system will restart the MYSQL service.
After the startup, check whether the running account of mysqld-nt.exe in the Task Manager is changed to sqlserver.
So far, the execution of MySQL settings with the GUESTS permission has been set.
Note: in actual use, it is best not to assign any group to the new user. it is an independent user. besides running mysql without any permissions, sqlserver is similar to the original one, however, the configuration is more complicated than mysql.