SQL server security mode for sccm
we are going to use a SQL2008R2 server for sccm 2007 SP2+R3. In pre-requisite check it says:
The SQL Server name specified is configured for SQL authentication security. It is recommended to configure the SQL Server to operate only in Windows authentication before continuing Configuration Manager Setup.
The SQL server is indeed configured using "SQL Server and Windows Authentication mode" for Server authentication. In addition, the logon account that used to install sccm has been added to the sysadmin role in the SQL server.
Can I ignor this warning and go ahead?
Thanks in advance.
November 22nd, 2010 9:52pm
I looked at this reference:
http://technet.microsoft.com/en-us/library/bb632649.aspx
It states that
We recommend SQL Server Windows Authentication Mode (default) because Configuration Manager site systems require Windows authentication to SQL Server hosting the
site database. Because both authentication methods that can be selected when installing SQL Server support Windows authentication, either can be used.
So it seems I can ignor the warning.
Please advice me if it is not the case.
Thanks.
Free Windows Admin Tool Kit Click here and download it now
November 22nd, 2010 11:17pm
Hi,
Yes you can ignore this warning, in some scenarios where another small database for instance will reside on the same server which requires SQL Authentication I configure both authentication methods aswell.
Regards,
Jörgen-- visit my System center blog at http://ccmexec.com --
November 23rd, 2010 12:47am
It's not recommended to put other databases on the server that is hosting the SQL database for ConfigMgr. Security best practise is using windows authentication.
Free Windows Admin Tool Kit Click here and download it now
November 23rd, 2010 3:20am
Does it mean the SQL server should be exclusively used by SCCM?
November 23rd, 2010 3:59am
Yes, that would be best practise from a security and performance point of view.
Free Windows Admin Tool Kit Click here and download it now
November 23rd, 2010 4:05am
Yes that is exactly what it mean. It also means that SQL and ConfigMgr should be on the same server too!
http://technet.microsoft.com/en-ca/library/bb735870.aspx
Best Practices for SQL Server
Use a dedicated SQL Server for each site
Do not use the Configuration Manager site database server to run other SQL Server applications
Configure SQL Server to use Windows authentication
Install Configuration Manager and SQL Server on the same computer
Follow security best practices for SQL Server, noting the following issues:
The site server computer account must be a member of the Administrators group on the computer running SQL Server
If you install SQL Server using a domain user account, you must ensure that a Service Principal Name (SPN) is populated to Active Directory Domain Services
http://www.enhansoft.com/
November 23rd, 2010 6:31am