Forum Discussion
SQL Service Account Best Practices - Standalone Mode
I am using a single SQL Server express 2019 on a standalone systems which is in workgroup (no Active Directory).
In this case is it a good practice to use default virtual accounts (as shown in the image) instead of creating local user accounts?
What is the best practice for setting up sql service accounts when the system is in workgroup?
Is there any security risk with virtual accounts vs using local accounts?
Hi ataro2375
After installing with built-in accounts, sql server give neccessary privileges to these accounts. Yok can see that privileges from secpol.msc --> User rights assignment.
if you use your own users for services, you must give necessary rights to your users. For example "log on as a service" right.
So if you give these rights, you can use your own created users
- There is not really best practice, but a lot of options like gMSA ="Generell Managed Service Account".
Simply use the suggested virtual accounts, there is no security risk, otherwise the wouldn't be suggested.
