Confusing language in the 'WSUS with SQL Server" subsection

[aydeisen]

https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment#wsus-with-sql-server

Regarding item #3 in the 'WSUS with SQL Server' subsection:

You cannot run the SQL Server service under a local non-system account or by using SQL Server authentication. WSUS supports Windows authentication only.

Is this meant as a recommendation to use WSUS with SQL Server if other authentication mechanisms outside of Windows Authentication is required? Or is this a reminder that WSUS only functions with Windows Authentication.

If it's the latter, would it make more sense to remove that sentence, as well as the same note in the 'WSUS with Windows Internal Database' section, and put it once in the 'WSUS database' subsection?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 6aa4be2a-4045-4135-353a-ed882ada9402
• Version Independent ID: c43f3896-9f9b-2754-9b5d-d73f9650592b
• Content: Plan Your WSUS Deployment
• Content Source: WindowsServerDocs/administration/windows-server-update-services/plan/plan-your-wsus-deployment.md
• Service: unspecified
• GitHub Login: @coreyp-at-msft
• Microsoft Alias: coreyp

[ghost]

Sorry for the late reply. (Disclaimer: I am not affiliated with Microsoft or the Microsoft Docs teams here on GitHub.)

To me, it appears to be much simpler than that. The sentence simply states that the SQL Server service must be running under a Windows System account like NT AUTHORITY\SYSTEM, NT AUTHORITY\NetworkService, or NT AUTHORITY\LocalService (only NT AUTHORITY\SYSTEM is powerful enough to run the SQL Server service without issues).

[ghost]

Also: the current phrasing does not seem problematic to me, but feel free to convince me of any need for improvement.

[ghost]

The ticket question is about the following section, https://docs.microsoft.com/en-us/windows-server/administration/windows-server-update-services/plan/plan-your-wsus-deployment#wsus-with-sql-server :

WSUS with SQL Server

We recommend that you use SQL Server with WSUS in the following cases:

1. You require an NLB WSUS solution.

2. You already have at least one instance of SQL Server installed.

3. You cannot run the SQL Server service under a local non-system account or by using SQL Server authentication. WSUS supports Windows authentication only.

[ghost]

To me, it reads as follows:

#	Scenario	Recommendation
1	If you require an NLB WSUS solution	use SQL Server with WSUS.
2	If you already have at least one instance of SQL Server installed	use SQL Server with WSUS.
3	If you cannot run the SQL Server service under a local non-system account or by using SQL Server authentication	use SQL Server with WSUS.

[IngridAtMicrosoft]

#please-close