SQL server security mode for sccm
we are going to use a SQL2008R2 server for sccm 2007 SP2+R3. In pre-requisite check it says: The SQL Server name specified is configured for SQL authentication security. It is recommended to configure the SQL Server to operate only in Windows authentication before continuing Configuration Manager Setup. The SQL server is indeed configured using "SQL Server and Windows Authentication mode" for Server authentication. In addition, the logon account that used to install sccm has been added to the sysadmin role in the SQL server. Can I ignor this warning and go ahead? Thanks in advance.
November 22nd, 2010 9:52pm

I looked at this reference: http://technet.microsoft.com/en-us/library/bb632649.aspx It states that We recommend SQL Server Windows Authentication Mode (default) because Configuration Manager site systems require Windows authentication to SQL Server hosting the site database. Because both authentication methods that can be selected when installing SQL Server support Windows authentication, either can be used. So it seems I can ignor the warning. Please advice me if it is not the case. Thanks.
Free Windows Admin Tool Kit Click here and download it now
November 22nd, 2010 11:17pm

Hi, Yes you can ignore this warning, in some scenarios where another small database for instance will reside on the same server which requires SQL Authentication I configure both authentication methods aswell. Regards, Jörgen-- visit my System center blog at http://ccmexec.com --
November 23rd, 2010 12:47am

It's not recommended to put other databases on the server that is hosting the SQL database for ConfigMgr. Security best practise is using windows authentication.
Free Windows Admin Tool Kit Click here and download it now
November 23rd, 2010 3:20am

Does it mean the SQL server should be exclusively used by SCCM?
November 23rd, 2010 3:59am

Yes, that would be best practise from a security and performance point of view.
Free Windows Admin Tool Kit Click here and download it now
November 23rd, 2010 4:05am

Yes that is exactly what it mean. It also means that SQL and ConfigMgr should be on the same server too! http://technet.microsoft.com/en-ca/library/bb735870.aspx Best Practices for SQL Server Use a dedicated SQL Server for each site Do not use the Configuration Manager site database server to run other SQL Server applications Configure SQL Server to use Windows authentication Install Configuration Manager and SQL Server on the same computer Follow security best practices for SQL Server, noting the following issues: The site server computer account must be a member of the Administrators group on the computer running SQL Server If you install SQL Server using a domain user account, you must ensure that a Service Principal Name (SPN) is populated to Active Directory Domain Services http://www.enhansoft.com/
November 23rd, 2010 6:31am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics