{"id":555,"date":"2011-05-12T13:58:00","date_gmt":"2011-05-12T13:58:00","guid":{"rendered":"\/blogs\/bobb\/post\/Some-ideosyncrasies-in-SQL-Server-service-and-service-user-group-names.aspx"},"modified":"2014-01-20T12:20:43","modified_gmt":"2014-01-20T20:20:43","slug":"some-idiosyncrasies-in-sql-server-service-and-service-user-group-names","status":"publish","type":"post","link":"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/","title":{"rendered":"Some idiosyncrasies in SQL Server service and service user group names"},"content":{"rendered":"

\nIn doing research for the Service SID posting<\/a>, I encountered some odd things about service names, service user group names and services. I said I'd write about these; this is the followup post.\n<\/p>\n

\nMost of the information about Windows Services, Service Accounts, and user groups that are created for SQL Server services (for security purposes) is documented in the SQL Server Books Online.This would be: http:\/\/msdn.microsoft.com\/en-us\/library\/ms143504(SQL.90).aspx<\/a> for SQL Server 2005. Replace the SQL.90 portion of the URL with SQL.100, SQL.105, and SQL.110 for SQL Server 2008, 2008 R2, and Denali respectively.\n<\/p>\n

\nThe Service SID always follows the service name, which is usually (but not always) related to the service group name. However there are some idiosyncrasies.\n<\/p>\n

\nGiven a machine name of ZMV08, with a default instance and a named instance called SQLDEV01..
\n— The browser service user group is always called SQLServer2005SQLBrowserUser$ZMV08
\n— Reporting service user groups changed in SQL Server 2008 R2
\n   SQLServerReportServerUser$ZMV08$MSRS10.MSSQLSERVER for SQL Server 2008 default instance
\n   SQLServerReportServerUser$ZMV08$MSRS10_50.MSSQLSERVER for SQL Server 2008 R2 default instance
\n   In Denali, its back to SQLServerReportServerUser$ZMV08$MSRS10.MSSQLSERVER, but I bet that changes before RTM.
\n— The name of the SSIS service changes
\n   MsDtsServer in SQL Server 2005
\n   MsDtsServer100 in SQL Server 2008 and SQL Server 2008 R2
\n   MsDtsServer110 in SQL Server Denali
\n   Again, the service SID name always reflects the service name
\n— The name of the SQL Server Active Directory Helper service is similar to the SSIS service
\n   MSSQLServerADHelper in SQL Server 2005
\n   MSSQLServerADHelper100 in SQL Server 2008 and R2
\n   This Service has been removed from SQL Server Denali
\n— The user group SQLServerFDHostUser$ZMV08$MSSQLSERVER does not contain any users, regardless of the usage or non-usage of Service SIDs
\n   And, although BOL says otherwise, this name does not appear to be release-dependent,  The name of the service is MSSQLFDLauncher, rather than FDHOST.
\n— The service user group for SQL Server Active Directory Helper, which DOES use a Service SID, does not contain either the Service SID or the service account user name. Instead, this group contains NT AUTHORITY\\NETWORK SERVICE and NT AUTHORITY\\SYSTEM.\n<\/p>\n

\nThe point of this whole exercise was to point out that scripts (like a custom PowerShell script, for instance) that use these names may need to take version into account. I hope this helps.\n<\/p>\n

\n@bobbeauch<\/p>\n","protected":false},"excerpt":{"rendered":"

In doing research for the Service SID posting, I encountered some odd things about service names, service user group names and services. I said I'd write about these; this is the followup post. Most of the information about Windows Services, Service Accounts, and user groups that are created for SQL Server services (for security purposes) […]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23],"tags":[],"class_list":["post-555","post","type-post","status-publish","format-standard","hentry","category-security"],"yoast_head":"\nSome idiosyncrasies in SQL Server service and service user group names - Bob Beauchemin<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Some idiosyncrasies in SQL Server service and service user group names - Bob Beauchemin\" \/>\n<meta property=\"og:description\" content=\"In doing research for the Service SID posting, I encountered some odd things about service names, service user group names and services. I said I'd write about these; this is the followup post. Most of the information about Windows Services, Service Accounts, and user groups that are created for SQL Server services (for security purposes) […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/\" \/>\n<meta property=\"og:site_name\" content=\"Bob Beauchemin\" \/>\n<meta property=\"article:published_time\" content=\"2011-05-12T13:58:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2014-01-20T20:20:43+00:00\" \/>\n<meta name=\"author\" content=\"Bob Beauchemin\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bob Beauchemin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/\",\"url\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/\",\"name\":\"Some idiosyncrasies in SQL Server service and service user group names - Bob Beauchemin\",\"isPartOf\":{\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/#website\"},\"datePublished\":\"2011-05-12T13:58:00+00:00\",\"dateModified\":\"2014-01-20T20:20:43+00:00\",\"author\":{\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/62bfa986c5b5d28fcffd8b4fc409c73e\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/category\/security\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Some idiosyncrasies in SQL Server service and service user group names\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/#website\",\"url\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/\",\"name\":\"Bob Beauchemin\",\"description\":\"SQL Server Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/62bfa986c5b5d28fcffd8b4fc409c73e\",\"name\":\"Bob Beauchemin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6f80e6cc667410857fa6a21931dc528b8092f4d112bf7a8ff7c267674d44ee37?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6f80e6cc667410857fa6a21931dc528b8092f4d112bf7a8ff7c267674d44ee37?s=96&d=mm&r=g\",\"caption\":\"Bob Beauchemin\"},\"sameAs\":[\"http:\/www.sqlskills.com\/blogs\/bobb\/\"],\"url\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/author\/bobb\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Some idiosyncrasies in SQL Server service and service user group names - Bob Beauchemin","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/","og_locale":"en_US","og_type":"article","og_title":"Some idiosyncrasies in SQL Server service and service user group names - Bob Beauchemin","og_description":"In doing research for the Service SID posting, I encountered some odd things about service names, service user group names and services. I said I'd write about these; this is the followup post. Most of the information about Windows Services, Service Accounts, and user groups that are created for SQL Server services (for security purposes) […]","og_url":"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/","og_site_name":"Bob Beauchemin","article_published_time":"2011-05-12T13:58:00+00:00","article_modified_time":"2014-01-20T20:20:43+00:00","author":"Bob Beauchemin","twitter_misc":{"Written by":"Bob Beauchemin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/","url":"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/","name":"Some idiosyncrasies in SQL Server service and service user group names - Bob Beauchemin","isPartOf":{"@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/#website"},"datePublished":"2011-05-12T13:58:00+00:00","dateModified":"2014-01-20T20:20:43+00:00","author":{"@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/62bfa986c5b5d28fcffd8b4fc409c73e"},"breadcrumb":{"@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/some-idiosyncrasies-in-sql-server-service-and-service-user-group-names\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.sqlskills.com\/blogs\/bobb\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.sqlskills.com\/blogs\/bobb\/category\/security\/"},{"@type":"ListItem","position":3,"name":"Some idiosyncrasies in SQL Server service and service user group names"}]},{"@type":"WebSite","@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/#website","url":"https:\/\/www.sqlskills.com\/blogs\/bobb\/","name":"Bob Beauchemin","description":"SQL Server Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.sqlskills.com\/blogs\/bobb\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/62bfa986c5b5d28fcffd8b4fc409c73e","name":"Bob Beauchemin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6f80e6cc667410857fa6a21931dc528b8092f4d112bf7a8ff7c267674d44ee37?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6f80e6cc667410857fa6a21931dc528b8092f4d112bf7a8ff7c267674d44ee37?s=96&d=mm&r=g","caption":"Bob Beauchemin"},"sameAs":["http:\/www.sqlskills.com\/blogs\/bobb\/"],"url":"https:\/\/www.sqlskills.com\/blogs\/bobb\/author\/bobb\/"}]}},"_links":{"self":[{"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/posts\/555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/comments?post=555"}],"version-history":[{"count":0,"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/posts\/555\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/media?parent=555"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/categories?post=555"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/tags?post=555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}