1

I am looking at decommissioning a service account (windows account).

Before that I want to ensure that there are no dependencies on this account from any sql server areas. I have already checked under:

  1. Security/logins
  2. Database and agent job service accounts
  3. Job owners
  4. Package owners
  5. Credentials/Proxy

What other places need checking?

variable
  • 3,590
  • 4
  • 37
  • 100

1 Answers1

0

The list you've given seems good.

You should also check about database owners and schema owners, but since you have checked logins I assume you have also checked database users linked to those logins.

Here is a way to change database owners :

Exec sp_changedbowner [user_name]

Here is a way to change schema owner :

ALTER AUTHORIZATION ON SCHEMA::db_owner TO db_owner;

You could also check job proxies and credentials.

Credentials are another way to authenticate on a given principal by the use of proxies, so this might be an impact if they are used in a job.

Hybris95
  • 310
  • 2
  • 13