Quantcast
Channel: SQL Server Setup & Upgrade forum
Viewing all articles
Browse latest Browse all 7696

Setup option: Grant Perform Volume Maintenance Task. Grants NT SERVICE\MSSQLSERVER the privilege instead of the configured Windows account.

$
0
0

Hi,

Using the setup wizard and configure the SQL Server Databse Engine to use domain account and cheking the checkbox: "Grant Perform Volume Maintenance Task to SQL Server Database Engine Service"

ConfigurationFile.ini:
....
SQLSVCACCOUNT="<domain>\<user>"
; Set to "True" to enable instant file initialization for SQL Server service. If enabled, Setup will grant Perform Volume Maintenance Task privilege to the Database Engine Service SID. This may lead to information disclosure as it could allow deleted content to be accessed by an unauthorized principal.
...

The Setup does not grant the privilege to the configured domain account, instead NT SERVICE\MSSQLSERVER is granted the permission.

Regards,
Brynjar



Viewing all articles
Browse latest Browse all 7696

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>