Windows2003 MSSQL Security Settings Tutorial

Windows2003 Server installation and setup tutorial for a long time no update, just recently on a server, just the remaining several completion, today is the first of the MSSQL security chapter-the MS SQL Server run under ordinary users.

Why do you have to run the MS SQL Server database in a "normal user" state? Because if you use the "Super administrator" or "Local System user" to run the "SQL2000 database", hackers will be exploited to exploit the server with system user privileges. Therefore, for server security, it is important to run MS SQL Server in the "normal user" state. At the same time, to the permissions on the hard disk to do the appropriate permissions to set up MS SQL Server to work correctly.

Run MS SQL Server under normal user

Establish common users;

Click Start-Administrative Tools-Computer Management to enter the Computer Management interface.

Click "System Tools"-"Local Users and Groups"-"Users" to enter user management;

Right-click on user, select New user, add new user;

Enter new user to establish the interface;

Enter MS SQL Server to run the user "Mssqlrun" and set the password, click "Create" to set up the user;

Open the security properties of the MSSQL Server installation packing directory (right-click on the installation disk letter, select Properties, and click the Security tab in the Pop-up property box).

Click Add, enter the MSSQL run user "Mssqlrun" in "Select User or group", click OK to add user to MSSQLServer installation packing directory;

Set the permissions of the "Mssqlrun" user, cancel the default read and run permissions, leave the Read and List folder directories permissions, click OK, save the settings, and exit;

Enter the MSSQL Server installation directory, also in the folder right click "Properties";

Open the "security" attribute of the MSSQL Server installation directory properties, remove the "SYSTEM" user, add "mssqlrun" users, and have full control of the permissions;

After you have set permissions for the directory, you need to set the running user for MS SQL Server to Mssqlrun;

Click "This account" to set up an account;

Click Browse to enter the user "Mssqlrun" for the MSSQL server in the input box;

Enter the password for the Mssqlrun user in the password and Confirm password, click "Apply" and the System pop-up Service Warning window "The new logon name will not take effect until you stop and restart the service." , click OK.

At this point restart the service, the MSSQL server is running under the mssqlrun of this ordinary user, server security will be greatly enhanced.