Question about setup

what accounts are required for SQL cluster setup?
I was trying to install SQL Server and ran into some prompts that I did not
see in the books that I read about SQL cluster setup.
I know about SQLservice account. However, I didn't know it requires a domain
group for each service, SQL Server, Agent and Full text search. Can someone
explain? And are there other accounts that I need to be aware that are needed?
Also, can both nodes access the database file at the same time? I read that
if you use database mirror it is not recommended. I didn't think having both
db servers accessing the database files at the same time was a good idea.
We are going to use SQL Cluster and database mirror for SQL 2005.
Cluster Service Account - must be in a domain.
SQL Service Account - must be in a domain.
3 Groups for SQL 2005 install.
http://support.microsoft.com/kb/910228 Section 2.5.11.
I will let a SQL MVP/DBA answer the can a DB that is mirrored be accessed
from 2 nodes at a time, I know I would not ever recommend it.
Cheers,
Rodney R. Fournier
MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner
"SAM" <SAM@.discussions.microsoft.com> wrote in message
news:AE8105A3-C2E7-41C0-A4E1-7189399BC548@.microsoft.com...
> what accounts are required for SQL cluster setup?
> I was trying to install SQL Server and ran into some prompts that I did
> not
> see in the books that I read about SQL cluster setup.
> I know about SQLservice account. However, I didn't know it requires a
> domain
> group for each service, SQL Server, Agent and Full text search. Can
> someone
> explain? And are there other accounts that I need to be aware that are
> needed?
> Also, can both nodes access the database file at the same time? I read
> that
> if you use database mirror it is not recommended. I didn't think having
> both
> db servers accessing the database files at the same time was a good idea.
> We are going to use SQL Cluster and database mirror for SQL 2005.
|||Hi Rodney, thanks for helpful. Another question, the account I used to
install sql, this account needs to have privileges to create these group
accounts, right?
"Rodney R. Fournier [MVP]" wrote:

> Cluster Service Account - must be in a domain.
> SQL Service Account - must be in a domain.
> 3 Groups for SQL 2005 install.
> http://support.microsoft.com/kb/910228 Section 2.5.11.
> I will let a SQL MVP/DBA answer the can a DB that is mirrored be accessed
> from 2 nodes at a time, I know I would not ever recommend it.
> Cheers,
> Rodney R. Fournier
> MVP - Windows Server - Clustering
> http://www.nw-america.com - Clustering Website
> http://msmvps.com/clustering - Blog
> http://www.clusterhelp.com - Cluster Training
> ClusterHelp.com is a Microsoft Certified Gold Partner
>
> "SAM" <SAM@.discussions.microsoft.com> wrote in message
> news:AE8105A3-C2E7-41C0-A4E1-7189399BC548@.microsoft.com...
>
>
|||I like to have them pre-staged. So no it doesn't. You could have an admin
create the groups for you.
Cheers,
Rodney R. Fournier
MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner
"SAM" <SAM@.discussions.microsoft.com> wrote in message
news:EC84C8C7-D22C-4380-BFF8-7EE9232E8CFD@.microsoft.com...[vbcol=seagreen]
> Hi Rodney, thanks for helpful. Another question, the account I used to
> install sql, this account needs to have privileges to create these group
> accounts, right?
> "Rodney R. Fournier [MVP]" wrote:
|||Actually, the SQL install account will need to set permissions on those
groups locally for the host nodes. Your install account must be a
domain-level account and should be local admin on all host nodes.
Geoff N. Hiten
Senior Database Administrator
Microsoft SQL Server MVP
"Rodney R. Fournier [MVP]" <rod@.die.spam.die.nw-america.com> wrote in
message news:O2GCoBV7GHA.3412@.TK2MSFTNGP04.phx.gbl...
>I like to have them pre-staged. So no it doesn't. You could have an admin
>create the groups for you.
> Cheers,
> Rodney R. Fournier
> MVP - Windows Server - Clustering
> http://www.nw-america.com - Clustering Website
> http://msmvps.com/clustering - Blog
> http://www.clusterhelp.com - Cluster Training
> ClusterHelp.com is a Microsoft Certified Gold Partner
>
> "SAM" <SAM@.discussions.microsoft.com> wrote in message
> news:EC84C8C7-D22C-4380-BFF8-7EE9232E8CFD@.microsoft.com...
>
|||Thanks Rodney. I was able to install SQL 2005 on the nodes.
I want to install Analysis Services on the second node to be our Analysis
Server. Is there any reason that I shouldn't? If I install it on the second
node would it cause a problem for anything?
"Rodney R. Fournier [MVP]" wrote:

> I like to have them pre-staged. So no it doesn't. You could have an admin
> create the groups for you.
> Cheers,
> Rodney R. Fournier
> MVP - Windows Server - Clustering
> http://www.nw-america.com - Clustering Website
> http://msmvps.com/clustering - Blog
> http://www.clusterhelp.com - Cluster Training
> ClusterHelp.com is a Microsoft Certified Gold Partner
>
> "SAM" <SAM@.discussions.microsoft.com> wrote in message
> news:EC84C8C7-D22C-4380-BFF8-7EE9232E8CFD@.microsoft.com...
>
>
|||Thanks, I was able to get the correct groups and permissions set.
"Geoff N. Hiten" wrote:

> Actually, the SQL install account will need to set permissions on those
> groups locally for the host nodes. Your install account must be a
> domain-level account and should be local admin on all host nodes.
> --
> Geoff N. Hiten
> Senior Database Administrator
> Microsoft SQL Server MVP
>
> "Rodney R. Fournier [MVP]" <rod@.die.spam.die.nw-america.com> wrote in
> message news:O2GCoBV7GHA.3412@.TK2MSFTNGP04.phx.gbl...
>
>
|||It does not create local groups, it assigns local permissions to domain
groups. Slight but distinct difference.
Geoff N. Hiten
Senior Database Administrator
Microsoft SQL Server MVP
"Rodney R. Fournier [MVP]" <rod@.die.spam.die.nw-america.com> wrote in
message news:%236bd$$W7GHA.2380@.TK2MSFTNGP02.phx.gbl...
> Really? Not the SQL Service account, but the installation user creates
> local groups on the clustered nodes? Hmm, did not know that, time to do
> more research.
> Cheers,
> Rodney R. Fournier
> MVP - Windows Server - Clustering
> http://www.nw-america.com - Clustering Website
> http://msmvps.com/clustering - Blog
> http://www.clusterhelp.com - Cluster Training
> ClusterHelp.com is a Microsoft Certified Gold Partner
>
> "Geoff N. Hiten" <SQLCraftsman@.gmail.com> wrote in message
> news:%231iWp3W7GHA.728@.TK2MSFTNGP04.phx.gbl...
>
|||I see, that is why I missed it. Cool. Thanks!
Rod
"Geoff N. Hiten" <SQLCraftsman@.gmail.com> wrote in message
news:uSQlYqZ7GHA.3644@.TK2MSFTNGP03.phx.gbl...
> It does not create local groups, it assigns local permissions to domain
> groups. Slight but distinct difference.
>
> --
> Geoff N. Hiten
> Senior Database Administrator
> Microsoft SQL Server MVP
>
> "Rodney R. Fournier [MVP]" <rod@.die.spam.die.nw-america.com> wrote in
> message news:%236bd$$W7GHA.2380@.TK2MSFTNGP02.phx.gbl...
>
|||Client tools install (including SSMS) is not cluster aware. It only
installs to the local node.
The installer is pretty smart and will only add or remove stuff that you
mark different on each run. You can install just the client tools on the
"other" nodes any time. Personally, I prefer to do it before the
cluster-aware elements.
Geoff N. Hiten
Senior Database Administrator
Microsoft SQL Server MVP
"SAM" <SAM@.discussions.microsoft.com> wrote in message
news:7BFA9BFF-1EDA-49BB-B18E-F7018A2E8B4A@.microsoft.com...[vbcol=seagreen]
> Rodney,
> I completed the install; however, when I launched SQL 2005 - I do not see
> Management Studio. Do I need to run the install again?
> When I installed 2005 on the test system, I did not have a problem but
> they
> were not configured with clustering so the setup option is different.
> "Rodney R. Fournier [MVP]" wrote:

question about liability insurance for contractor

hi guys,
Here is what hiring manager said, " Contractor is required to have
professional and general liability
insurance of at least one million dollars per occurrence in force at
alltimes. Contractor must warn BROKER thirty (30) days prior to any
planned lapses or changes in insurance coverage, and immediately if any
unplannedlapses occur. Contractor must be ready to provide a certificate of
insurance with twenty-four hours notice; the certificate will list CLIENT as
an additional insured."
How much do you think I have to pay?Kevin,
Best to call an insurance agency who provides this type of coverage for a
quote.
HTH
Jerry
"Kevin" <pearl_77@.hotmail.com> wrote in message
news:O9HO0ID0FHA.720@.TK2MSFTNGP15.phx.gbl...
> hi guys,
> Here is what hiring manager said, " Contractor is required to have
> professional and general liability
> insurance of at least one million dollars per occurrence in force at
> alltimes. Contractor must warn BROKER thirty (30) days prior to any
> planned lapses or changes in insurance coverage, and immediately if any
> unplannedlapses occur. Contractor must be ready to provide a certificate
> of
> insurance with twenty-four hours notice; the certificate will list CLIENT
> as an additional insured."
> How much do you think I have to pay?
>
>
>

Question about encrypting a current App.

When we convert an existing app to start encryption and decrypting data as needed, I am required to make changes to atleast 50 stored procs. Within each of these SPs I do:

-- OPEN SYMMETRIC KEY

-- do the ecrypt or decrypt operation

-- CLOSE SYMMETRIC KEY

Is it possible to not use these steps in each of my SP's? i.e, can we generalize the open and close key calls somewhere else? Any tips are greatly appreciated. TIA.

You can open the symmetric keys as part of connecting to the database and close them as you log out. Anything executing in that context will have access to the keys and be able to encrypt and decrypt with them.

If your application opens/uses multiple connections on behalf of a user and is supposed to encrypt/decrypt on all of them, you would need to open the keys when you open each connection and close them when you cease using a connection. If connections are not pooled, you don't need to close the keys if you're going to kill the connection anyway.

Thanks
Laurentiu