WIN2003 MSSQL to run security settings for ordinary users _win server

What do I need to run the MS SQL Server database in the state of "normal user"? Because if you use the "Super administrator" or "Local System user" to run the "SQL2000 database", it will be exploited by hackers, using system user privileges to invade the server. Therefore, for server security, it is important to run MS SQL Server in the "normal user" state. At the same time, to the permissions on the hard disk to do the appropriate permissions to set up MS SQL Server to work correctly.

run MS SQL Server under normal user
Establish common users;
Click Start-Administrative Tools-Computer Management to enter the Computer Management interface.
Click "System Tools"-"Local Users and Groups"-"Users" to enter user management;
Right-click on user, select New user, add new user;
Enter new user to establish the interface;

Enter MS SQL Server to run the user "Mssqlrun" and set the password, click "Create" to set up the user;


The first step: C Disk Directory settings

C disk requires the following permissions:
C:\administrators All Permissions
System Full Permissions
IIS_WPG read-only and run permissions (applies only to the current folder)
SQL2000 Run User (applies only to current folder)
List Folder/Read data
Read properties
Read Extended Properties
Read permissions

C:\Program Files\Microsoft SQL Server\MSSQL\Data (if this directory is used to place the SQL2000 user database)
Administrators all permissions
System Full Permissions
SQL2000 full permissions of the running user


Open the security properties of the MSSQL Server installation packing directory (right-click on the installation disk letter, select Properties, and click the Security tab in the Pop-up property box).
Click Add, enter the MSSQL run user "Mssqlrun" in "Select User or group", click OK to add user to MSSQLServer installation packing directory;

Set the permissions of the "Mssqlrun" user, cancel the default read and run permissions, leave the Read and List folder directories permissions, click OK, save the settings, and exit;


Enter the MSSQL Server installation directory, also in the folder right click "Properties";
Open the "security" attribute of the MSSQL Server installation directory properties, remove the "SYSTEM" user, add "mssqlrun" users, and have full control of the permissions;

After you have set permissions for the directory, you need to set the running user for MS SQL Server to Mssqlrun;

Click "This account" to set up an account;

Click Browse to enter the user "Mssqlrun" for the MSSQL server in the input box;

Enter the password for the Mssqlrun user in the password and Confirm password, click "Apply" and the System pop-up Service Warning window "The new logon name will not take effect until you stop and restart the service." , click OK.

At this point restart the service, the MSSQL server is running under the mssqlrun of this ordinary user, server security will be greatly enhanced.

If you need to quote or reprint this article, please specify the author: Poly Friends

Supplemental permissions to prevent problems that SQL Server cannot run, if a problem restarts the system, change the permissions to run with system privileges, and then refer to this article settings, generally no problem.

Generally, we recommend that C disk partitions above 15G, SQL 2000 can be directly installed in the C: Disk default directory, permissions can be referred to the video to set. In general, SQL 2000 uses no more than 3G of space, even if there is a MySQL database, its size will not exceed 2G, which is obvious, if the database more than 1G your server will need a lot of memory to work properly, such as 2G memory, so, The database that does the operation of the virtual host is not too big, there is not so much memory available at all.

C disk requires the following permissions:
C:\administrators All Permissions
System Full Permissions
IIS_WPG read-only and run permissions (applies only to the current folder)
SQL2000 Run User (applies only to current folder)
List Folder/Read data
Read properties
Read Extended Properties
Read permissions

C:\Program Files\Microsoft SQL Server\MSSQL\Data (if this directory is used to place the SQL2000 user database)
Administrators all permissions
System Full Permissions
SQL2000 full permissions of the running user



If your database is installed in the C disk, but the user's library directory is placed in the F:\SQLDATA directory, and there is a backup database placed on this disk, F disk will need to have the following permissions:

F:\ (If this partition is used to place the SQL2000 user database)
Administrators all permissions
System Full Permissions
SQL2000 Run User (applies only to current folder)
List Folder/Read data
Read properties
Read Extended Properties
Read permissions

F:\SQLDATA (if this directory is used to place the SQL2000 user database)
Administrators all permissions
System Full Permissions
SQL2000 full permissions of the running user

F:\SQLBACK (if this directory is used to place the SQL2000 backup database)
Administrators all permissions
System Full Permissions
SQL2000 full permissions of the running user

The "SQL2000 run user" Here is the user that is set up in SQL 2000 Enterprise Manager, in the security of the attribute, the default is system, if you have seen the "Extraterrestrial security Package Video description", you should have changed this user, you should use the changed username.