Re: getting rid of BUILTIN\administrator

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Dan D. (DanD_at_discussions.microsoft.com)
Date: 07/29/04 

Date: Thu, 29 Jul 2004 05:42:39 -0700

Thanks Jasper. I now have a [NT Authority\System] login. 

-- 
Dan D.
"Jasper Smith" wrote:
> You won't see it but you should be able to add it using QA e.g.
> 
> exec sp_grantlogin [NT Authority\System]
> 
> -- 
> HTH
> 
> Jasper Smith (SQL Server MVP)
> http://www.sqldbatips.com
> I support PASS - the definitive, global
> community for SQL Server professionals -
> http://www.sqlpass.org
> 
> "Dan D." <DanD@discussions.microsoft.com> wrote in message
> news:405B8A4F-F683-46F0-AA1B-CC01780B65A2@microsoft.com...
> > So, if I remove the BUILTIN\administrator login you're saying I have to
> add a login for NT Authority\system. Is that correct? We're running Windows
> 2000/2003 on our servers. I don't see an NT Authority login. Is there
> another name for it?
> >
> > Thanks,
> > -- 
> > Dan D.
> >
> >
> > "Richard Waymire [MSFT]" wrote:
> >
> > > no, fulltext is required to be localsystem unfortunately.  And yes,
> that's
> > > the right service.
> > >
> > > -- 
> > > Richard Waymire, MCSE, MCDBA
> > >
> > > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > > "Dan D." <DanD@discussions.microsoft.com> wrote in message
> > > news:1CC74058-7E57-4C84-9163-3FDAB27EA214@microsoft.com...
> > > >I was thinking of creating a login called "SQLServer" with
> administrator
> > > >priveleges and using it for mssqlserver, sqlserveragent and full text.
> Will
> > > >this work for full text? And is the full text service actually called
> > > >"Microsoft Search"?
> > > >
> > > > Thanks,
> > > > -- 
> > > > Dan D.
> > > >
> > > >
> > > > "Richard Waymire [MSFT]" wrote:
> > > >
> > > >> look at sp_changedbowner to change the owner to sa.  As you noted,
> make
> > > >> sure
> > > >> that the service accounts for mssqlserver, sqlserveragent can log in.
> > > >> Full-text always runs as localsystem so make sure [nt
> authority\system]
> > > >> is a
> > > >> valid login and sysadmin.
> > > >>
> > > >> -- 
> > > >> Richard Waymire, MCSE, MCDBA
> > > >>
> > > >> This posting is provided "AS IS" with no warranties, and confers no
> > > >> rights.
> > > >> "Dan D." <DanD@discussions.microsoft.com> wrote in message
> > > >> news:D2E3D1A7-26E1-472F-94F4-D8CC036BF4B3@microsoft.com...
> > > >> > Using SS2000. I'm trying to improve the security of our SQLServers.
> I
> > > >> > have
> > > >> > a server that has only 3 users. The BUILTIN, sa and a user called
> > > >> > "dar".
> > > >> >
> > > >> > The BUILTIN is the dbo for every database. If I try to remove the
> dbo
> > > >> > from
> > > >> > a database I get - "Cannot use the reserved user or role name
> 'dbo'. If
> > > >> > I
> > > >> > try to remove database access I get - "The database owner cannot be
> > > >> > dropped."
> > > >> >
> > > >> > How do I get rid of it?
> > > >> >
> > > >> > I understand that I'll have to change the user that SQLServer Agent
> and
> > > >> > Full Text Indexing use to logon. Is Full Text Indexing show up as
> > > >> > Microsoft Search in Services?
> > > >> >
> > > >> > Thanks,
> > > >> > -- 
> > > >> > Dan D.
> > > >>
> > > >>
> > > >>
> > >
> > >
> > >
> 
> 
>

Relevant Pages

  • Re: Obtaining Window login name from a trigger
    ... > this when an application uses a single service account is to use SET ... > Jasper Smith (SQL Server MVP) ... > login account. ...
    (microsoft.public.sqlserver.server)
  • Re: Credentials not being passed with remote access
    ... Dan, ... johnx was set up as a local login on sql server. ... Furthermore, since "johnx" can successfully login locally, it ... appears "johnx" is setup correctly in SQL Server. ...
    (microsoft.public.sqlserver.security)
  • Re: Permissions WTF
    ... What does the following query return for your windows ... Jasper Smith (SQL Server MVP) ... > the login does not have explicit access to any db's and no server roles ...
    (microsoft.public.sqlserver.security)
  • Re: sqlserver agent starts and then immediately stops
    ... "Dan D." ... > priveleges to use as the login for SQL Server and SQL Server Agent services. ...
    (microsoft.public.sqlserver.server)
  • Re: getting rid of BUILTINadministrator
    ... that's what I'm saying you must do if you want to use full-text ... "Dan D." ... > add a login for NT Authority\system. ... >>>>> I understand that I'll have to change the user that SQLServer Agent ...
    (microsoft.public.sqlserver.server)