question

Blackhawk-17 avatar image
Blackhawk-17 asked

NTFS Directory Permissions for SQL Server 2012

After installation of SQL Server 2012 the O/S administrators revoke administrative access to the system. That of course prevents me from "seeing" into the Backup, DATA, Logs, etc. directories. Now I can't use NotePad to read the errorlog or copy database files when re-locating or other simple scenarios. What is a good way of getting the requisite permissions on the instance directories and how are others working around these security hurdles? I understand all the least privilege arguments but there are also arguments for being able to do day-to-day work for those of us who aren't granted administrative access on the O/S.
sql-server-2012permissionsdirectoryfile-systemntfs
10 |1200 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

· Write an Answer
Grant Fritchey avatar image
Grant Fritchey answered
Permissions have to be granted to the appropriate file locations. No other way around it really. We spent a lot of time with our security people, walking them through the stuff that we needed to do in order to get our job done. They carefully exposed what we needed, as we demonstrated the need. But, we documented it so that each subsequent setup went smoothly.
1 comment
10 |1200 characters needed characters left characters exceeded

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Therein lies the dilemma. I would prefer if Microsoft had an Instance$DBA Group created at install with the desired access rather than assuming all DBAs must be O/S administrators as well. What we have today is reinventing the wheel at every install.
1 Like 1 ·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.