Re: Lock out Local administrator

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Dave,

I've installed SP4. (I checked the version of AS after installation, and it
was applied) The registry entry wasn't created automatically so I created it
manually.

But as administrator I can still connect to my cubes? What am I doing wrong?

Regards,
Nico

"Dave Wickert [MSFT]" wrote:

> Look in the SP4 release notes, you will see that there is a new registry
> setting which will disable the automatic granting of OLAP Administrator
> permissions for machine administrators. However, it is still not full-proof
> situation because any machine administrator can also add themselves to the
> OLAP Administrators group by-hand. Thus the real bottom line is that there
> isn't a real way to lock out an Administrator -- although with then new
> registry setting you can at least force them to explicitly give themselves
> OLAP Administrator permissions.
>
> BTW: What is "personal edition of Analysis Services"? We have no such
> product. What I think you mean is Developer Edition (which does include a
> license for Analysis Services).
>
> --
> Dave Wickert [MSFT]
> dwickert@xxxxxxxxxxxxxxxxxxxx
> Program Manager
> BI SystemsTeam
> SQL BI Product Unit (Analysis Services)
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Francesco Anti" <fanti_@xxxxxxxxxxx> wrote in message
> news:%23NDAPundFHA.412@xxxxxxxxxxxxxxxxxxxxxxx
> > At http://support.microsoft.com/default.aspx?scid=kb;en-us;231951 you can
> > find a list of the permissions needed to administer an Analysis server.
> > Local administrators have all of this permissions, so they will be always
> > able to administer your analysis server
> >
> > Francesco Anti
> >
> > "verbani" <verbani@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:74F964C9-81AC-483D-A6A9-FA10EBD2596E@xxxxxxxxxxxxxxxx
> >> hi,
> >>
> >> I'm creating an app on local machines. These have a personal edition of
> >> as
> >> installed.
> >>
> >> What I want to do is secure the AS that I can only connect with our
> >> application local user. Big problem is off course the local admin
> >> account.
> >> I've deleten the OLAP Admin group of the machine. But the local admin
> >> still
> >> can see everyting even if he doesn't have any rights to the OLAP
> >> database...
> >>
> >> Anyone an idea?
> >>
> >> Regards,
> >> Nico
> >
> >
>
>
>
.

Relevant Pages

  • Re: Creating directories on Vista machines using .NET
    ... application that installs to the Program Files directory. ... For example, what do you mean by "using administrator rights, having ... This is the case with most modern games. ... It will *not* write to that installation path under ...
    (microsoft.public.dotnet.framework)
  • RE: remote administrator login
    ... Thank you for posting in SBS newsgroup. ... For the issue regarding why the application doesn't create those registry ... | Thread-Topic: remote administrator login ... | values the first time it starts up after installation. ...
    (microsoft.public.windows.server.sbs)
  • Re: Creating directories on Vista machines using .NET
    ... There are a number of relatively standard methods for maintaining application settings, none of which involve an Access database, nor storing the settings under the Program Files directory hierarchy. ... For example, what do you mean by "using administrator rights, having logged on as a normal user"? ... This includes changing the permissions of the root directory to prevent non-administrator accounts from having write access, as well as changing from the default installation directory to one under the Program Files tree. ... I’m hence considering this as a viable way to release my applications in future, since all of them will probably involve significant interactions with local Access databases. ...
    (microsoft.public.dotnet.framework)
  • Re: ActiveX is installed but runs only for Administrator
    ... My application runs only for the Administrator who installed the ... Some applications create HKEY_CURRENT_USER registry settings the ... installation, and WHILE THE SERVER IS STILL IN INSTALL MODE. ...
    (microsoft.public.windows.terminal_services)
  • Re: Problems installing SQL Server 2005 in two node cluster
    ... I'm assuming that SQL Server 2005 doesn't need to be an administrator ... that make sure you are not using domain admin-level accounts for the service ... Server2005Setup Log Files" and "StartingSQLServerManually." ... This is the fifth attempt at installation, ...
    (microsoft.public.sqlserver.clustering)