SQL R Services Installation adds Local OS Users

Question

Hello Everyone,

The accounts I am referring to are added to the Operating System Local User Store automatically through the installation of SQL R Services (renamed to Machine Learning Service in 2017). R Services lets you execute R scripts in the database without moving the data outside of the SQL Server or over the network.

The accounts are in the database so they are not listed as accounts associated to the Database Security Logins, and are unable by default to login locally. But due to the fact that they are added as a Local User the ability to reset the password exists, I just have yet to be able to find any useful information in my research as it relates to changing these passwords and what the impact may be. :)

Can anyone tell me what the best practice is for managing these local user accounts or what the impact of changing the passwords might be?

From Configure Windows service accounts and permissions - SQL Server | Microsoft Learn

• SQL Server Launchpad- A trusted service that hosts external executables that are provided by Microsoft, such as the R or Python runtimes installed as part of R Services or Machine Learning Services. Satellite processes can be launched by the Launchpad process but is resource governed based on the configuration of the individual instance. The Launchpad service runs under its own user account, and each satellite process for a specific, registered runtime inherits the user account of the Launchpad. Satellite processes are created and destroyed on demand during execution time.
Launchpad can't create the accounts it uses if you install SQL Server on a computer that is also used as a domain controller. Hence, setup of R Services (In-Database) or Machine Learning Services (In-Database) fails on a domain controller.

R Services or Machine Learning Services EXTSVCACCOUNT, EXTSVCPASSWORD, ADVANCEDANALYTICS***
R Services/Machine Learning Services: SQLRUserGroup (SQL 2016 and 2017) doesn't have the Allow Log on locally permission by default

Answer 1

Hi @Oliver ,

Can anyone tell me what the best practice is for managing these local user accounts or what the impact of changing the passwords might be?

Please see this MS docs: https://learn.microsoft.com/en-us/sql/machine-learning/administration/scale-concurrent-execution-external-scripts?view=sql-server-2017
Passwords associated with each user account are generated at random, but you can change them later, after the accounts have been created.
So there is no impact, you can even change your password periodically if needed.
See: https://learn.microsoft.com/en-us/sql/machine-learning/security/sql-server-launchpad-service-account?view=sql-server-2017#enforcing-password-policy

Best regards,
Seeya

---

If the response is helpful, please click "Accept Answer" and upvote it, as this could help other community members looking for similar queries.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hello @Oliver ,

Thank you for your question.

Please follow these steps, it will help you:

For local installations, you must run Setup as an administrator. If you install SQL Server from a remote share, you must use a domain account that has read and execute permissions on the remote share.

Start the setup wizard for SQL Server 2016.

On the Installation tab, select New SQL Server stand-alone installation or add features to an existing installation.

Install R Services (In-Database)

On the Feature Selection page, select the following options:

Select Database Engine Services. The database engine is required in each instance that uses machine learning.
Select R Services (In-Database). Installs support for in-database use of R.
R Services feature selection

Important

Do not install R Server and R Services at the same time.

On the Consent to Install Microsoft R Open page, click Accept.

This license agreement is required to download Microsoft R Open, which includes a distribution of the open-source R base packages and tools, together with enhanced R packages and connectivity providers from the Microsoft R development team.

After you have accepted the license agreement, there is a brief pause while the installer is prepared. Click Next when the button becomes available.

On the Ready to Install page, verify that the following items are included, and then select Install.

Database Engine Services
R Services (In-Database)
After setup is complete, if you are instructed to restart the computer, do so now. It is important to read the message from the Installation Wizard when you have finished with Setup.

For more information please go through this link:
https://learn.microsoft.com/en-us/sql/machine-learning/install/sql-r-services-windows-install?view=sql-server-2016#get-the-installation-media

If the reply was helpful, please don't forget to upvote or accept as answer.

Thanks,