Re: Oracle Software Owner WIndows 2K

"Niall Litchfield" <niall.litchfield_at_dial.pipex.com> wrote in message news:<3f735077$0$262$cc9e4d1f_at_news.dial.pipex.com>...
> "Matt" <mccmx_at_hotmail.com> wrote in message
> news:cfee5bcf.0309250449.3f714acf_at_posting.google.com...
> > Hello everyone,
> >
> > I have a query about security/ownership of the Oracle software on
> > Windows 2K.
> >
> > We have an 8.1.7 install on Windows that was installed using the
> > Domain Admin account. Therefore the Oracle binaries and database
> > files are owned by the domain admin account.
> >
> > The Oracle database is configured as a service on Win 2K and runs
> > under the SYSTEM account. Therefore in theory it is independant of a
> > user account.
> >
> > One of the security guys on site is planning to remove the domain
> > admin accounts from all the servers and I'm concerned that this will
> > affect the database setup.
>
> Assuming that your servers are members of an NT domain/or AD then removing
> all rights for domain accounts to admin them is one of the daftest things I
> have ever come across. I can't think of any reason why one would do this -
> other than to make windows admin harder than it should be obviously. As far
> as you are concerned ensuring that the relevant dba domain user accounts are
> members of the local ORA_DBA groups and that the services run under the
> SYSTEM account (or one equally privileged) will do you just fine.
>
>
> --
> Niall Litchfield
> Oracle DBA
> Audit Commission UK

Niall,

I have to disagree.

No domain, no cry.
No NetBIOS, no cry.

Granted, I have the backups (compressed) running over ftp, not the latest, greatest way to move files, but my w2k oracle servers onsite do not participate in no stinkin w2k domain.

this uses the same scripts for backups as for disaster recovery.

Its not that hard to maintain a local account on the box, on its own workgroup.
You really don't need a domain for oracle win32 boxes. Now, if you're using WebDAV for 9i R2 XDB, that is another story.

You really only need a set of Oracle TNS listeners. No NetBIOS required.

Paul Received on Thu Sep 25 2003 - 23:49:07 CDT