Re: archive database rights

From: A. Tolga KILINĒ (kilinc@tis.havelsan.com.tr)
Date: 09/06/02 

From: "A. Tolga KILINĒ" <kilinc@tis.havelsan.com.tr>
Date: Fri, 6 Sep 2002 09:19:24 +0300

Hi Ron,
when I deny or delete the BUILTIN/administrators group and do not give
system admin role to any other user, can any user who knows the sa login and
password access the db for administration without using his windows account
login? if yes , how?
Actually waht I want is not to give any windows account the system role, but
keep the sa password in a safe place, and in emergency I want someone to
take the sa password from the safe place and enter the SQL for system
administration. Is it possible? If yes, will the person use enterprise
manager to log in to the SQL?
Thanks.
Tolga

"Ron Talmage" <rtalmage@prospice.com> wrote in message
news:e9QsJMWVCHA.1944@tkmsftngp10...
> Tolga,
>
> 1. If you make the login a member of the db_backupoperator database role,
> that user will be able to back it up. I believe that's what you mean by
> 'archiving'.
>
> 2. When you are in mixed mode and deny or delete BUILTIN\Administrators,
> then sa and any other login with the system administrator server role are
> system administrators.
>
> Ron
> --
> Ron Talmage
> SQL Server MVP
>
> "A. Tolga KILINĒ" <kilinc@tis.havelsan.com.tr> wrote in message
> news:ed4kmtLVCHA.2452@tkmsftngp09...
> > Hi,
> > I want a user in my domain (or in SQL) to access to SQL tables "only"
for
> > archiving them, I don't want him to delete/change tables (at least
before
> > archiving the tables on a media).
> > I gave deny to BUILTIN/Administrators group. I use mixed mode
> authentication
> > (I have sa account active).
> > Is there any solution to this?
> > Secondly, at this configuration who is the system admin of SQL? sa, or
> > noone?
> > Regards,
> > Tolga
> >
> >
>
>

Quantcast