cluster and sql accounts | SQL Server Performance Forums

SQL Server Performance Forum – Threads Archive

cluster and sql accounts

There is a confusion with regards to the account the runs cluster services and sql server and agent services. can someone shed some light on the best practices and where i can find information to support this. thanks
Check: http://www.sql-server-performance.com/wndows2000_clustering_install_step3.asp HTH Luis Martin
Moderator
SQL-Server-Performance.com
And also these links :http://www.microsoft.com/technet/prodtechnol/windowsserver2003/maintain/operate/scconbp.asp&e=7415
http://www.sql-server-performance.com/sqlserver2000_clustering_install_part1.asp&e=7415
for information required. HTH Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
thanks guys.
i have another quick question. do i need to reboot the primary node before installing sql on the secondary node in a active/active cluster configuration or do just install sql on the other active node before rebooting both nodes primary then secondary?. thanks
Reboot is not required in this case and refer to these linkshttp://support.microsoft.com/support/sql/content/70papers/70clstr.asp&e=7415. &http://www.sqlteam.com/Item.asp?ItemID=4888&e=7415 for step by step details.
Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
i just want to get this procedure straight, do i install service packs and hotfixes after installing sql on all active nodes or install service packs and hotfixes after every sql install?. thanks
Yes, by default SP & other related hotfixes must be installed after you install SQL on the nodes. For more details how to approach take help from README.HTML files attached in Service packs and hotfixes. http://www.sql-server-performance.com/q&a12.asp link to approach SP installation on cluster.
http://www.sql-server-performance.com/sqlserver2000_clustering_install_part3.asp – installing the SQL Server 2000 Service Pack on cluster. HTH Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
still not clear, i’m planning a multi node cluster of 2 active and one passive configuration, and it’s not clear if i need to install sql server, sp and hotfixes on all active nodes before rebooting or reboot each node after installing sql, sp and hotfixes. the links provided tells you about active/passive configuration which is not the configuration setup i’m planning. thanks

what i want to know is when i install the service pack on one of the nodes does it affect all other nodes or do i need to install the sp on all nodes individually.
From the link provided it specified : You will need to run SP for every instance of SQL Server running in your cluster, but you will only need to run SP once for each instance. In other words, you don’t need to run SP for both the primary and second nodes, only for the primary node. The SP setup program will automatically update the necessary files on both nodes for each instance of SQL Server. Be sure that both nodes of the SQL Server cluster are up and running successfully. And you would get more information from README.HTM file. Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
thanks for that. What i’m actually after is, correct me if i’m wrong. i need to install sql server on all active nodes before i install sp and hotfixes on one of the active nodes to get the remaining nodes patched.
Yes, follow links provided by LUis & me about installing Cluster initially and then proceed as specified above. Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
one quick question, do i need to configure msdtc on it’s own disk resource in windows 2003 as it’s now done manually. I’ve built a windows 2003 sql server cluster before but can’t really remember how i configured the msdtc. thanks
Take help from this KBAhttp://support.microsoft.com/default.aspx?kbid=301600 to configure on Win2K3. Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
does that mean that msdtc would have it’s own shared disk resource group?, during SAN and cluster configuration?
From the article:
Note: You can use an existing group with a Storage resource in it. However, Microsoft does not recommend that you create the MSDTC resource in the default Cluster Group or in the group that contains other program resources, such the Microsoft Exchange resources. I usually put it in the Cluster Group if the usage of MSDTC is not very high.
another quick question what account does sql and sql agent services run under
They should be privileged under ADMINISTRATOR. Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
looking from the security perspective does the account have to be a domain admin. account or just a domain account that is part of the local administrators group of all the participating nodes.
another quick question is do you need to stop msdtc services before installing sql server on a windows 2003 cluster because i know it’s part of the pre-install procedures in older versions. thanks
On the security perspective : You can remove builtinAdministrators login as long as you give the cluster administrator account a login with SYSADMIN server role. Otherwise can customize the rights to the builtinadmin login by double clicking on it and removing the SYSADMIN server role and giving it a lower security role. As a whole make sure all the windows admin accounts have proper logins and security in SQL server for them to login and run queries. Go thru this KBAhttp://support.microsoft.com/default.aspx?scid=kb;EN-US;254321 about Cluster do’s and dont’s. On the second question, MSDTC service will be installed alongwith SQL server and go thru this KBAhttp://support.microsoft.com/default.aspx?scid=/support/sql/content/70papers/70clstr.asp about step by step installation of Cluster. And this linkhttp://www.sql-server-performance.com/sqlserver2000_clustering_install_part1.asp to stop unnecessary service before you install. HTH Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
thanks for your reply
still on the msdtc issue. Microsoft recommends that you do not put the msdtc in the same resource group as the cluster resource group as well as sql server resource group. so does that mean that msdtc would be in it’s own group with it’s own disk resource?. thanks
After you install Cluster Server and configure IIS or SQL Server, you may have to manually install MSDTC as a cluster instance. By default, Windows installs MSDTC in the first group going alphabetically ordered in the Cluster Administrator that contains an IP address resource, Network Name Resource and a Disk Resource. On of the KBA refers:
If SQL Server is clustered, only one instance of MSDTC is required. The recommended procedure for installing an MSDTC Resource is to install it in a group other than the cluster group. If the MSDTC resource has already been installed, and it is in the cluster group and SQL Server is functioning correctly, Microsoft recommends that you keep it in that location. Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
still on the msdtc issue. Microsoft recommends that you do not put the msdtc in the same resource group as the cluster resource group as well as sql server resource group. so does that mean that msdtc would be in it’s own group with it’s own disk resource?. thanks
can i get a link to this kb article because there’s a debate i’m on at the moment with regards to this.
http://support.microsoft.com/default.aspx?kbid=290624 this was referred above I think and also corresponding KBA referred. Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
thanks for that i get the idea it’s just that i don’t know if this still applies in windows 2003
The corresponding KBAhttp://support.microsoft.com/default.aspx?kbid=301600 refers for Win2K3. Satya SKJ
Moderator
http://www.SQL-Server-Performance.Com/forum
This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
thanks

As already mentioned, if you do not expect heavy msdtc usage put it in the cluster group unless you have a lot of disks to spare. About the SQL Service account it no longer needs to be local administrator. Think this was introduced with SP3. It can be a normal user in the domain and the cluster setup will set the needed rights.
]]>