RE: Block Admin access to my data
From: Lan Lewis-Bevan [MS] (lanlb@online.microsoft.com)
Date: 08/01/02
- Next message: Lan Lewis-Bevan [MS]: "RE: Block Admin access to my data"
- Previous message: Ernest DeVore: "DisallowAdhocAccess Registry Settings"
- In reply to: Mike: "Block Admin access to my data"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: lanlb@online.microsoft.com (Lan Lewis-Bevan [MS]) Date: Thu, 01 Aug 2002 13:24:58 GMT
If you really need to prevent sa from performing certain tasks, you may
consider re-configuring your SQL server to use "Windows Authentication
Only" security mode. So sa will not be able to login and you can assign
permissions to other NT users individually.
---Add individual logins the rights as designed for different DBs and
functions.
---Remove builtin\admin account.
In this way, you can control who has what explicit permissions, instead of
leaving sa with all the un-removable rights.
Still, you need to pay attention to your SQL service/agent accounts, since
they need to be in sysadmin group.
Regards,
Lan Lewis-Bevan (MS SQL support)
This posting is provided "AS IS" with no warranties, and confers no rights.
Are you secure? For information about the Strategic Technology Protection
Program and to order your FREE Security Tool Kit, please visit
http://www.microsoft.com/security.
- Next message: Lan Lewis-Bevan [MS]: "RE: Block Admin access to my data"
- Previous message: Ernest DeVore: "DisallowAdhocAccess Registry Settings"
- In reply to: Mike: "Block Admin access to my data"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
