SQL server 2012 Browser Account lacks permissions by Dirk_Gubbels

Active

Type:	Bug
ID:	767178
Opened:	10/12/2012 6:30:48 AM
Access Restriction:	Public

Workaround(s)

view

User(s) can reproduce this bug

When changing the service account of the SQL server 2012 Browser, Connections to named instances of SSAS no longer work.
This is because the new account is not automatically given the rights to read the related Registry entries.
In Previous versions of the product, the required access was granted automatically when changing the service account via Configuration Manager

Details (expand)

English

SQL Server 2012 - Enterprise Edition

Analysis Services

Windows Server 2008 R2 Enterprise (SP1)

US English

1. open SQL server configuration manager
2. On a server with a named instance of SSAS 2012, Change the service account of the Browser service to a low-privilege account
3. Restart the browser service
4. Try to connect to connect to the named instance. This will fail
5. give the service account READ rights to the registry key HKLM\Software\Microsoft\Microsoft SQL Server
6. Restart the browser
7. Try to connect to the named instance again. This time it is successful

The service account does not get sufficient permissions to access the registry when it is assigned to the SQL browser account.

It is expected that the new service account is granted the minimal rights needed to perform its task, just like it was in the previous versions

X64

0 attachments

Posted by Dirk_Gubbels on 10/12/2012 at 6:32 AM

Manually give the browser service account read access to the registry key HKLM\Software\Microsoft\Microsoft SQL server

Microsoft