So, we want to get a SQL box on a separate leg of our DMZ to limit what would be compromised if someone got at it. Assuming we don't need real-time mirroring between the SQL box on the LAN and the box ...

I'm rebuilding our SQL 2000 box and trying to figure out the best way to configure the permissions settings. The first question is whether to use a local or domain account for the SQL service account.