SQLBackupAndFTP should always be run under it’s own user account but setting this up is very difficult to script.
Creating a new user is easy enough, but providing “Allow log on locally” and “Log on as a Service” Local Sec Policy rights is quite difficult in a scripted environment.
Is this something that could be handled by the installer?
SQLBackupAndFTP consists of two components: the configuration application and the Windows service (more info: Application Architecture).
By default, the Windows service is installed under the Local System account, and it is not currently possible to specify a different user during the installation.
However, you can install SBF as usual and then change the user for the SqlBackupAndFTP Windows service afterwards.
If you have any questions or need further assistance, feel free to reach out.