Sql-server – SQL Server Builtin Logins Migration

loginsmigrationsql server

I am in the process of scripting existing SQL Server 2008R2 logins for migration to a new server instance.

I see that the existing logins contain the below…

Windows Groups:

[BUILTIN\Administrators]

[BUILTIN\Users]

[BUILTIN\Backup Operators]

Windows Users:

[NT SERVICE\MSSQLSERVER]

[NT SERVICE\SQLSERVERAGENT]

Should these logins be used at all? And do they get created by default on installation?

Best Answer

The following logins will be created on installation. They are containers for the accounts that the SQL Server Database Engine & Agent run under.

 [NT SERVICE\MSSQLSERVER]

 [NT SERVICE\SQLSERVERAGENT]

The other accounts are groups that have been manually added into your SQL instance.

BUILTIN\Administrators was installed by default in SQL Server 2005 but not in SQL Server 2008 R2.

I'd look at the permissions on the existing server to see what accounts are using these groups and then determine if they are needed.