Domain accounts needed?

RAUL GARCIA RIVERA 1 Reputation point
2021-12-01T21:41:33.49+00:00

Hi, I'm using SQL Server 2014 (upgraded from 2008 version last year) in my job and OS admin asked me to check some domain accounts about SQL if they are needed or can be disabled.

Those accounts are SQLAgentCmdExe, SQLDefaultAction, SQLDiscovery and SQLMonitor

I don't know SQL Server so much. I googled some things about, but they refer to SQL 2007 and 2008 versions.

I don´t know if they are still needed on 2014 version.

Can any clarify me what does they do or If could face problems if they are disabled/blocked.

Thanks in advance

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
12,914 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Erland Sommarskog 102.4K Reputation points
    2021-12-01T22:24:56.267+00:00

    These names do not ring a bell. These are not accounts created by default by SQL Server that I know of. Maybe they have been created by some third-party tool. The name SQLMonitor has a Red Gate flavour to it.

    In any case, I cannot vouch for that you can disable these accounts, since I have no knowledge about your site.

    0 comments No comments

  2. CathyJi-MSFT 21,096 Reputation points Microsoft Vendor
    2021-12-02T01:51:22.463+00:00

    Hi @RAUL GARCIA RIVERA ,

    >Those accounts are SQLAgentCmdExe, SQLDefaultAction, SQLDiscovery and SQLMonitor

    These accounts are not default built in account for SQL server. I did not find these accounts in my environment as below screenshot.

    154179-screenshot-2021-12-02-091731.jpg154252-screenshot-2021-12-02-095220.jpg

    SQL Server Default Action Account is the default SQL Server Management Pack Action Account for SQL Server 2008, 2008 R2 and 2012.

    SQL Server Discovery Account is used for discovery of SQL Server 2000, 2005, 2008 and 2008 R2 server role components.

    > Can any clarify me what does they do or If could face problems if they are disabled/blocked.

    I could not give you a certain answer ,due to we are not familiar your environment.

    If this is a test environment, you can try to disable these accounts one by one to check if your SQL server will get any error message.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    0 comments No comments

  3. RAUL GARCIA RIVERA 1 Reputation point
    2021-12-02T16:42:43.007+00:00

    Thank you both so much,

    I dug a bit more and found some clues linking those accounts to System Center Operations Manager (SCOM) tool.

    Apparently they used SCOM where I work, in the past, so the accounts are not more needed.

    Thanks.