Re: user and group permissions

From: Rodney R. Fournier [MVP] (rod_at_die.spam.die.nw-america.com)
Date: 01/10/05


Date: Mon, 10 Jan 2005 10:06:19 -0600

Within SQL - Security - Logons - remove Administrators. Create another Group
in NT for SQLAdmins say and add those accounts that understand and can
support SQL. Lastly, add SQLAdmins as the SQL Server Role of System
Administrators.

Cheers,

Rod

MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering
http://msmvps.com/clustering - Blog

"Gabriel" <anonymous@discussions.microsoft.com> wrote in message
news:218601c4f729$01902440$a601280a@phx.gbl...
> Hello,
>
> Is it possible to deny access to local NT administrator
> and one specific domain user on sql server cluster? The
> cluster runs under domain user account with adminstrator
> privileges on the local machine, I have another domain
> user account, it is my personal account - but this one
> should have no access to the sql server database. For
> server administration I use local NT administrator - and
> of course this account can access sql server with
> adminstrator privileges - but I would like to deny this
> access.
> The easiest way would be probably blocking all NT builtin
> admin accounts and domain admin accounts to access SQL
> Server, except one domain account - which runs SQL Server
> instance. Can this be done somehow?
> thanks



Relevant Pages

  • Re: BULK Insert Problem
    ... > I Log on to my system using the Local System Administrator Account. ... > do I see that The SQL Server Service is starting using the Local Account ...
    (microsoft.public.sqlserver.programming)
  • Re: SQL account rights
    ... Please advice what is the best, suitable rights rather than domain admin ... Warren Brunk - MCITP - SQL 2005, ... Add it as a login to the SQL Server ... files, or backups, make sure that the service account has Full ...
    (microsoft.public.sqlserver.security)
  • Re: User authentication
    ... There are 2 SQL Server 2005 ... 1 SQL Server 2000 installed on another server ... Windows account instead to run backup jobs. ...
    (microsoft.public.sqlserver.clients)
  • RE: Win2000 OS Access for SQL Server Admin
    ... yet the other SQL services start successfully before ... Admin account. ... LocalSystem has more privledges than local administrator. ... SQL Server Agent connects to SQL Server using SQL Server Authentication ...
    (microsoft.public.sqlserver.security)
  • Re: Guest Account being enabled
    ... Therefore....I'm clueless when it comes to SQL. ... >the SA account is using SQL and the password is stared. ... >>>I have a User Account named Administrator. ... and the exchange service username are also ...
    (microsoft.public.security)