Re: SQL Permissions
From: Neil Pike (neilpike@compuserve.com)
Date: 07/01/02
- Next message: Neil Pike: "Re: Where to place SQL Server DMZ, LAN etc."
- Previous message: Venu Oddiraju: "Creating users"
- In reply to: John Shurer: "SQL Permissions"
- Next in thread: CLIVE.CHINERY@NBC.UK.NET: "Re: SQL Permissions"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 01 Jul 2002 15:34:22 +0100 From: Neil Pike <neilpike@compuserve.com>
John - by "publicly" accessible do you mean to the internet? If so, then your
own dba's are the last thing you need to be worried about!
Generally speaking, I always give the SQL dba's/support people local admin
rights on a server they support. Do you want them calling you at 03:00 in the
morning because they need to check the SQL errorlogs because SQL won't start.
(The SQL tools to do this are zero good if they can't connect in the first
place....)
> My SQLAdmins are asking for the following:
>
> 1) Administrator access to the local box on running SQL
> 2) The ability to access the SQLData directory directly through drive
> mappings
>
> We are attempting to create as secure an environment as possible and keep
> everything locked down. In my opinion, they do not need these type of
> accesses. They do have sa privileges to the SQL server but I see no reason
> to give them Windows 2000 administrator privileges. Also, to further the
> security on the servers (they are publicly accessible), we are trying to
> eliminate all shares including admin shares. Seems to me they should be able
> to accomplish everything using the SQL tools. Am I off base on this?
>
Neil Pike MVP/MCSE. Protech Computing Ltd
Reply here - no email
SQL FAQ (484 entries) see
http://forumsb.compuserve.com/gvforums/UK/default.asp?SRV=MSDevApps
(faqxxx.zip in lib 7)
or www.ntfaq.com/Articles/Index.cfm?DepartmentID=800
or www.sqlserverfaq.com
or www.mssqlserver.com/faq
- Next message: Neil Pike: "Re: Where to place SQL Server DMZ, LAN etc."
- Previous message: Venu Oddiraju: "Creating users"
- In reply to: John Shurer: "SQL Permissions"
- Next in thread: CLIVE.CHINERY@NBC.UK.NET: "Re: SQL Permissions"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
