question

kalervojankko avatar image
0 Votes"
kalervojankko asked kalervojankko answered

SQL Server Cluster with AlwaysOn Availability Groups how to change the service accounts for SQL services?

We are building an Sharepoint 2019 production farm and for the start we have a two-node SQL server cluster with Availability Group configured and apparently someone has installed SQL Server on those nodes with our test-farm SQLAdmin account and also set the SQL Server Services running with test-farm SQLService accounts.

I was able to login to those instances with the test-farm SQLAdmin account and then I just added new login for the prod-farm SQLAdmin with sysadmin rights, but I should also change the service accounts that are running the SQL Server Services to the prod-farm service accounts.

How this should be done in a SQL Server cluster with AvailabilityGroups configured?

This is just the initial setup so any data loss doesn't matter.

sql-server-generaloffice-sharepoint-server-administration
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

The account running the Sql Services does not necessarily need elevated access to data (like sa) unless someone set it up that way and the application(s) is using and depends on the service account. To change the service accounts, the best way to this is to go into the Sql Server Configuration Manager on each instance. It handles changing permissions that need changing behind the scenes. Since you say you have an Always-On configuration, you will want to go into each instance on both the Primary and Secondary via the Cfg manager, as I stated, and change it there for each instance.

1 Vote 1 ·
YiLu-MSFT avatar image
0 Votes"
YiLu-MSFT answered

Hi @kalervojankko

Agree with @RobbinVarn-7255, If you are going to change service accounts, here are the steps.

launch the SQL Configuration Manger.

Click on the SQL Server Service option and you will see all available services listed on the right-hand side of the window along with their current state, start mode and log on name.

114514-capture.png


Right-click on the service and select Properties.

114446-capture.png


On the Log On tab you will see the account credentials being used to run the service. You can update this by entering the desired service account name and password into the specified fields.

114448-capture.png



If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



capture.png (111.6 KiB)
capture.png (53.8 KiB)
capture.png (102.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

kalervojankko avatar image
0 Votes"
kalervojankko answered

Thanks for both of you!

I was aware that I need to change it on both nodes from the cfg manager. I was just wondering is there a correct way to do this in an AlwaysOn configuration in a real situation...

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.