Have you ever wondered why it is recommended to use SQL Server Configuration Manager (SSCM) instead of the Services applet (services.msc) when managing SQL Server services? In this blog post, we will explore the reasons behind this advice and shed light on the benefits of using SSCM.

Password Validation

One of the key advantages of using SSCM is that it performs password validation when changing the service account. Unlike services.msc, which saves the password without validation, SSCM ensures that the password is correct. This prevents service startup failures due to incorrect passwords, which can result in the standard error message: “Error 1069: The service did not start due to a logon failure.”

Permissions in the Registry

Changing the service account through SSCM also takes care of updating the permissions in the registry. This is crucial for the SQL Service startup process, as the service account needs to be able to read the registry keys. If the account is changed using services.msc, SQL startup may fail due to insufficient permissions.

Group Membership

SSCM adds the service account to the appropriate group membership, providing the necessary permissions. This ensures that the service has the required access rights to function properly. When changing the service account via services.msc, this step is not automatically performed, potentially leading to permission-related issues.

Service Restart

When changing the service account through SSCM, the service is automatically stopped and started. This ensures that any changes take effect immediately. On the other hand, changing the password via services.msc does not require a service restart. However, as mentioned earlier, SSCM validates the password, and an error will be thrown if an incorrect password is provided.

Encryption

Another advantage of using SSCM is that it updates the Windows local security store, which protects the service master key for the Database Engine. This ensures that the encryption of sensitive data remains intact. It is important to note that SSCM uses WMI (Windows Management Instrumentation) to make these changes. Therefore, the aforementioned benefits also apply when changing the password programmatically using SMO (SQL Server Management Objects) or WMI.

In conclusion, SQL Server Configuration Manager offers several advantages over the Services applet when it comes to managing SQL Server services. It provides password validation, takes care of permissions in the registry, manages group membership, performs service restarts, and ensures encryption integrity. By utilizing SSCM, you can ensure the smooth operation of your SQL Server environment and avoid potential issues that may arise from using services.msc.