Re: Allowing Vendor to Place SQL Server Instance w/o giving customer a




"Ed S" <EdS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9645921B-0D78-4873-92CD-BF107A3B80FA@xxxxxxxxxxxxxxxx

We have a vertical market vendor who we bought a program requesting to
place
a separate SQL Server instance on our server without giving us admin
rights.
I understand that they want to protect their schema and want to keep us
from
writing to the DB, but I feel very uncomfortable with this. What would
you
do? Thanks.

Ed, I don't believe in generalized discomfort as a rationale for doing or
not doing anything, nor as license to be annoyed; what I would do is ask
them to explain THEIR rationale for what they want to do, although I think
you already know the answer on that. I would also ask myself and my team if
we actually need admin rights, and for what purpose. If we needed X, Y and Z
permissions to satisfy internal policy, audit requirements or something else
then I would make that known to the vendor. If they were unwilling or unable
to satisfy a legitimate concern or business need, I would dismiss them.
Otherwise, I would move forward.

MJ




.



Relevant Pages

  • Re: Should I still buy SBS 2003 Premium w/ ISA in light of XP SP2s ICF2?
    ... Admin rights is a very simple story. ... relying upon the firewall to block accordingly the access to workstations, ... don't have the same level of packet-filtering in your favor that ISA ...
    (microsoft.public.windows.server.sbs)
  • Re: Randy
    ... This posting is provided "AS-IS" with no warranties or guarantees and confers no rights. ... Microsoft MVP - Directory Services ... it is best practice design to create an empty place holder root domain to ... hold the enterprise admin group and to hold the forest schema operations ...
    (microsoft.public.windows.server.active_directory)
  • RE: Impact of removing administrative rights in an enterprise running XP
    ... While it is true that you can push out patches and software via group ... reporting mechanisms for software/patch installations whatsoever. ... Quite often, the admin rights are ...
    (Focus-Microsoft)
  • Re: Impact of removing administrative rights in an enterprise running XP
    ... the network admin is "Admin" of the network... ... they should only have/need the appropriate rights for their role in the firm. ... reporting mechanisms for software/patch installations whatsoever. ...
    (Focus-Microsoft)
  • Re: Impact of removing administrative rights in an enterprise running XP
    ... You can easily install patches without admin rights... ... WSUS can push out patches and the workstations do not need admin rights. ... Yes, there are success stories, but it's totally dependent on a managed network. ...
    (Focus-Microsoft)