Account to Run SQL under?

From: JM (JM_at_nospam.com)
Date: 02/25/05


Date: Fri, 25 Feb 2005 08:05:04 -0600

Currently, our network/server/domain admins have admin control of our sql
servers. One manager wants to run sql under a special local admin account
to restrict this access, but then we will be effected by the password change
requirement, which could break sql every 90 days.

What is the best way to run sql so that the server admins don't have sql
admin access? Can I run it under "local system", and restrict machine
admins?



Relevant Pages

  • Re: Connection Failed - SMS Admin Console
    ... SQL database in different ways. ... via the SMS Provider. ... >SMS Admins group? ...
    (microsoft.public.sms.admin)
  • Re: Linux...Is it REALLY FREE? How much is YOUR TIME WORTH?
    ... MS SQL ... operations (including patch management) with little to no expertise in ... On Slammer, Microsoft ... I blame the admins who dropped the ...
    (alt.os.linux.suse)
  • Re: Security Configuration Advice
    ... First, note that "network admin"s do not need to be SQL admins, ... Without SQL "sa", then the accounts will only have access in SQL ... If the application allows for configuring access control (as to what ...
    (microsoft.public.windows.server.security)
  • Re: SQL 2000 Security Question
    ... Before I denied built in admins, I created an ID called SQLDBA that had the SA role, because I knew I could lock myself out of SQL. ... Taking your question at face value, if you had a user named, let's say, jsmith, and you make jsmith dbo of the pubs database, but then you define access-denied for jsmith to pubs, jsmith will not be able to connect to pubs. ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Server solutions going forward
    ... The latter question is easily answered by the partial list that Russ provided. ... In some cases, admins didn't even *know* that SQL was running on a box, because it was some other app entirely. ... AVIEN Founding Member ...
    (NT-Bugtraq)