Configuring local security privileges for SQL Server
If you want to use the option to register an instance or replica, an account other than Local System requires certain local security privileges. These privileges are necessary since the for SQL Server agent logs on as the SQL Server user when it accesses data.
Note:
This configuration applies to local security privileges only. For domain-level privileges, contact your domain administrator.
To configure the local security privileges
- Open the Local Security Policy.
- Click Local Policies.
- In the User Rights Assignment, add the account to the following policies:
Impersonate a client after authentication
Replace a process level token
- Run the group policy update command (group policy update) for this change to take effect:
gpupdate /Force
- If the Client Service and the Legacy Network Service use this account to log on, restart these services.
- For a SQL Server cluster, configure the local security privileges on each node in the cluster. For SQL Server availability groups, configure the services on all replicas where you want to run backups.