Re: mission impossible: How to protect a Sql Server (with VB.NET) from somebody who as administrator rights?

From: Kevin Spencer (kevin_at_DIESPAMMERSDIEtakempis.com)
Date: 11/03/05

  • Next message: ueli: "App with COM components on network share" 
    Date: Thu, 3 Nov 2005 08:37:35 -0500

    SQL Server permissions are incredibly configurable. You don't have to make
    people administrators to enable them to perform specific types of tasks. You
    can create accounts that have these specific permissions and no other. 

    -- 
HTH,
Kevin Spencer
Microsoft MVP
.Net Developer
A watched clock never boils.
"Pieter" <pietercoucke@hotmail.com> wrote in message 
news:eSfAs4G4FHA.3292@tk2msftngp13.phx.gbl...
> The problem is: the IT staff that must do the maintenance of the SQL 
> Server really needs the sysadmin...
>
> "David Portas" <REMOVE_BEFORE_REPLYING_dportas@acm.org> wrote in message 
> news:1131018930.858186.322060@z14g2000cwz.googlegroups.com...
>> You can't protect your data against users with the SYSADMIN role. What
>> you should be able to do is deny admin level access to the users. You
>> didn't explain why they need that. If it's an issue that they need to
>> administer some things and not others  then separate off the restricted
>> data into another server or instance to which they don't need admin
>> level access.
>>
>> If it's just an issue of them historically having had an admin user
>> name and password, then change the user name or password and/or issue
>> new user names as appropriate.
>>
>> -- 
>> David Portas
>> SQL Server MVP
>> --
>>
>
>
  • Next message: ueli: "App with COM components on network share"

    Relevant Pages

    • Re: Clustering and SA Role
      ... It helps if your Domain/Enterprise Administrators, Server Administrators, ... > I guess the issue is that in SQL2000 one could remove local admin group ... > legitimately getting into SQL Server. ... Trust for sure simplifies management in many ...
      (microsoft.public.sqlserver.clustering)
    • RE: Restricting Access to BUILTINAdministrators
      ... SQL Server Security: Security Admins ... Removing the Builtin Administrators - Some Pitfalls to Avoid ... > and remove access to each of the databases on the server. ...
      (microsoft.public.sqlserver.security)
    • NT Access Level for DBAs
      ... Our NT administrators won't grant DBA's more than a normal ... Unable to restart MS SQL Server / Agent Services ... access level DBA's require to be able to administer SQL ... I do not want to be an NT Admin, but I would like to be ...
      (microsoft.public.sqlserver.security)
    • Re: Account to Run SQL under?
      ... you use AD Global Groups to grant the SQL Server DBAs administrative access, ... How to impede Windows NT administrators from administering a clustered ... with great power comes great responsibility. ... If you do not want local administrators to have system admin access rights then all you need to so is restrict the BUILTIN\Administrators rights. ...
      (microsoft.public.sqlserver.server)
    • Re: Lost SA Password
      ... Try logging on as a member of the local Administrators group and ... executing the script with a trusted connection: ... BUILTIN\Administrators SQL Server login. ... > The 'sa' password is not known, and the default database ...
      (microsoft.public.sqlserver.security)