Replication security help please...

Hello,

I am being told that my SQL server can no longer use a domain account to do replication cause it is a violation of SOX codes... So here is my question to ease my pain....

I believe that I can run the SQL server service under [local system account] with no issues but what about the SQL server agent service?

It needs rights on all the servers right?

I have found where you can configure replication to use sql authentication but then I can use snapshots...

any help would be appriciated...

oh.. I use transactional and merge if that makes any difference.

Hi William,

Replication agents run under the context of a Windows account. The agents make Windows Integrated Security connections by using this account. The account under which the agent runs depends on how the agent is started. If you start the agent from a SQL Server Agent job, the default: When a SQL Server Agent job is used to start a replication agent, the agent runs under the context of an account that you specify when you configure replication.

So SQL server agent service account do not need rights on all the servers, it could be local system account as well.

Hope it helps.

Wanwen

|||

So if I change SQL agent to run as system account but change replication to run as an account that does have access to all servers that have replication, then this should work?

|||

Yes, Please remember to change SQL agent service account through SQL server configuration manager.

Wanwen