Microsoft Sharepoint Products and Technologies Resource Kit eBook

32 Part I: Introduction to SharePoint Products and Technologies
Best Practices Although you can install Windows SharePoint Services into
an existing application pool, your database security is at risk because other
Web applications in the same pool can modify Windows SharePoint Services
databases. To protect your databases, install Windows SharePoint
Services in its own application pool.
7. Choose the security account you want to use for the application pool. You can
choose the Predefined option button and select the drop-down to choose
between Network Service, Local Service, or Local System, or you can choose
the Configurable option button and type in the User Name, Password, and
Confirm Password fields. Click OK to continue.
Best Practices It is best to use the predefined security accounts because
they most likely already have the required rights to create and modify databases.
If you set a network account for your SQL Server services, use this
option.
Tip You can change these options later by using the Internet Information
Services (IIS) Manager, expanding the Application Pools node, right-clicking
the application pool, selecting Properties, and then clicking the Identity tab.
8. The Application Pool Changed page will appear and prompt you to restart the
IIS Services. Do not click OK yet. Minimize this window until you have completed
configuring your SQL Server security.
To configure SQL Server security
1. Open Enterprise Manager, and navigate to your SQL Server. Expand the
Security node, right-click the Logins property, and then click the New Login
option. If the account you will use already appears in the Logins pane, rightclick
the account and then click Properties.
2. If you have not already created Microsoft Windows NT accounts as SQL Server
service accounts using the Active Directory Users And Computers console,
you must do so before you can assign the account-appropriate permissions.
For more information about how to create secure accounts, see the SQL Server