Hi all,

the BOL state that a domain user account with two additional privileges (act
as part of OS and connect as service) and membership in the local
administrator group in all nodes is sufficient for installing SQL Server
2005. Has anybody successfully installed the product under these
circumstances? What happens when SQL Server tries to add the service account
users to the service groups (which a regular domain user is not allowed to
do)? What are the minimum rights you needed to install?

Thank you for sharing your experiences!

Best,
Nils Loeber

I typically just make sure that the account(s) is already in the domain group
before running the installation. It's too much trouble to ask for the
privileges to add a domain user to a domain group.

See the following passage from BOL
(ms-help://MS.SQLCC.v9/MS.SQLSVR.v9.en/instsql9/html/7fdde9be-e39a-465a-b4a5-248203ff1aa3.htm):

<BOL>
The domain groups should have the appropriate service accounts added to
them. If the service accounts are not members of the appropriate domain
groups at the time Setup is run, Setup will attempt to add them. In this
case, the account under which Setup is running must have adequate privileges
to add accounts to the domain groups. If SQL Server Setup is run under an
account that does not have permission to add users to the domain groups, the
users must already be members of the appropriate group.
</BOL>

Linchi


[quoted text, click to view]