This one has me going so much I had to blog for a 3rd time today. I keep finding boxes that have failing backups and other processes. These jobs have been stopped for weeks in some cases. And why you ask? Hah, that’s a good question. The reason why they keep failing my most learned internet peeps is because the previous DBA was running them under his own personal acct. He had scads of jobs and other processes running under his acct… as did the DBA before him and the DBA before him.
Are you people kidding me with this crap? Ok, for those of you who don’t know enough to be sure why I’m upset, you never run anything under your own acct… or anyone else’s acct for that matter. Even if you don’t leave this gig, you’ll still be forced to change your password at some point and there’s no way you can keep up with every job, service, ssis pkg, script, website, credential, etc that you’ve got running under your acct. And then you’ve gotta get everyone else involved to help you find it because you keep getting locked out every 5mins.
When IT was young you could excuse these things because we were still figuring things out then, but there’s just no excuse for this level of idiocy anymore. Come on guys, straighten up.
Heh, actually, we’re just running into this as well. One of the other DBAs’ last day was Friday, and the last thing I did before I left was take him out of sysadmin on all of the Production instances. Got home to find jobs failing already 🙁
Task on the list for this week is to make sure this isn’t going to be a further problem either on other instances or for the rest of us that are left.
“Guilty!” he cried, his head hanging in shame. I sick at security, and accounts and such. The best I’ve gotten us an AD account that the box runs under, that I am slowly changing jobs to run under. I am but a n00b, please forgive, and please point me to a resource that I can learn this most important knowledge from!
That’s tough. I don’t know of a resource that has practical advice like that. Start here and work your way to other blogs with security advice.
I’ll admit to having set up things to run under my account as a test or perhaps using my creds as a test, but don’t use it for Prod. I like the idea of service accounts for things like that. My worst problem tends to be the need to run jobs on my local machine because we don’t have a server that’s local and available for whatever it is I need. (So looking forward to getting that server set up so I can move this stuff off of my machine. At least the processes are documented and the code is version controlled, but still….)