SQL2008 Builtin\Administrators and etc

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hi all,

My environment:
1) Windows 2008 Std SP2 x64 (workgroup)
2) SQL 2008 Std SP1 x64 (workgroup)
3) SQLService account used to setup the SQL2008, member of the local
administrators group.
4) APPService account that I am using to install the Application which
requires SQL, also member of the local administrator group.
5) Just for reference... The MSSQLSERVER and SQL Server agent are running
under my SQLService account and if I specify Local System Account the results
are the same.

After the isntallation I have noticed that BUILTIN\Administrator groups is
no more part of the SQL SysAdmin and Public group. All previous version used
to add BUILTIN\Administrator by default.
Ok, I can buy this and I can understand that this is security
precoutions...etc. I added manually BUILTIN\Administrator group in SSMS. My
both service accounts are member of the local administrator group but I am
only able to start the SQL Server Management Studio with the account that I
isntalled the SQL 2008 server even though my APPService account is also
member of the local adminsitartors groups added manually into the SSMS.

Can someone please help why I am not able to start the SSMS console
eventhough I have enough privileges. The only account that can start the SSMS
is the service account I installed my SQL server. Logically any account which
is member of the BUILTIN\Administrator group should be able to do that.

Your help is much appreciated.

Pluto
.

Relevant Pages

  • Re: Share Permissions and Security Groups
    ... >> storage on a member server. ... >> If the account is in no group that directly or indirectly has been ... >> resources that are controlled and add the groups of principals ... > From your comments I ensure that each Project Folder NTFS does not inherit ...
    (microsoft.public.security)
  • mssbsssr/sbsmonacct causing audit failure
    ... it first checks if the user account sbsmonacct exists, ... It is a member of Domain Users, Enterprise Admins, and by implication Users ... a member of either the Remote Operators group or the Domain Power Users ... This happens because on SBS 2003, the "Deny log on locally" policy ...
    (microsoft.public.windows.server.sbs)
  • User cant access OWA or RWW
    ... New staff member aboard; heading out on a business trip so I'm walking her through the process of accessing her email and desktop remotely. ... Keeps getting the note that either her login or password are bad. ... I then used the Add User wizard in Server Management to create a new account for her. ... User not allowed to logon at this computer ...
    (microsoft.public.windows.server.active_directory)
  • Re: Unable to unlock peer group members accounts
    ... Roger, Steven, thanks both of you for your valuable input which do help us in further troubleshoot our Unlock User account issue. ... In other words, if you have peer group member users but they reside in different OUs, then make sure you delegate to each Ou respectively with the required delegated group memebership. ...
    (microsoft.public.win2000.security)
  • Re: "Edit Users..." Menu Item Disabled in Telephony Management Sna
    ... To make it clear i used account that is member of domain admins and group ... I set up also the account (already member of domain admins and trough this ... Running "tapicfg show" revealed that I had no Active Directory TAPI ...
    (microsoft.public.win32.programmer.tapi)