Re: To deteremine NT logins + Sql Logins with sa + dbo + prviliges
From: SQL Guy (SQLGuy@EarthLink.Net)
Date: 07/02/02
- Next message: linda deng[MS]: "RE: SSPI Context Error: Fails by computer name"
- Previous message: SQL Guy: "Re: Can web site data be protected from access by the webmasters?"
- In reply to: FR: "To deteremine NT logins + Sql Logins with sa + dbo + prviliges"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "SQL Guy" <SQLGuy@EarthLink.Net> Date: Tue, 2 Jul 2002 00:44:02 -0700
Yes, you can do it directly from SQL:
Select Domain+'\'+Name From OpenRowset(NetGroupGetMembers,
'BUILTIN\Administrators')
Use it recursively as needed. Look at xp_logininfo for details.
Gary
MCDBA, MCSA, MCSD, MCSE+I
"FR" <floydrev@hotmail.com> wrote in message
news:uGxR3VGICHA.2024@tkmsftngp11...
> I have an NT login that I guess is part of some NT group thats a valid
login
> on SQL Server. I definitely do not see his login individually.
> He currently has sa priviliges which could be part of
Builtin\Administrators
> group. But when i look under the Admin group, dont see his name but could
be
> part of the Domain admin group .
>
> Is there a way i can drill down to the lowest level to find out each and
> every NT member of the builtin\Administrators group or for that matther
any
> NT group although i may see further groups under that.
>
> Please advice.
>
>
- Next message: linda deng[MS]: "RE: SSPI Context Error: Fails by computer name"
- Previous message: SQL Guy: "Re: Can web site data be protected from access by the webmasters?"
- In reply to: FR: "To deteremine NT logins + Sql Logins with sa + dbo + prviliges"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
