Re: how to block local admins

From: SQL Server Development Team [MSFT] (sqldev@microsoft.com)
Date: 12/16/02 

From: "SQL Server Development Team [MSFT]" <sqldev@microsoft.com>
Date: Mon, 16 Dec 2002 10:53:03 -0800

But frankly, at the end of they day, they are the local administrators.
Sure, you can try to keep them out, but they can always stop the mssqlserver
service, just copy the data files to their own machine, attach them to their
own SQL Servers, and voila, they've got your data.

Rule number one is security - you must trust your admins otherwise change
them. And audit them, of course. 

--
-Richard Waymire
Group Program Manager, SQL Server
(rwaymi@microsoft.com)
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm.
"Erika Christensen" <erikach@online.microsoft.com> wrote in message
news:av8FF0SpCHA.2276@cpmsftngxa09...
> Hi Alexia,
>
> The following article describes how to blocklocal admins from SQL Server:
>
> 263712 INF: How to Impede Windows NT Administrators from Administering a
> SQL Server
> http://support.microsoft.com/?id=263712
>
> Thank you!!
> Erika Christensen
> SQL Server Support
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> Are you secure?  For information about the Strategic Technology Protection
> Program and to order your FREE Security Tool Kit, please visit
> http://www.microsoft.com/security.
>

Relevant Pages

  • Re: Remote Desktop Users and Least User Rights
    ... user accounts (no administrative rights on the local machine). ... have many users that are setup so that they can access their ... from the Administrators group, the list of authorized remote users ... Remote tab> Select Remote Users) gets wiped out. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Broadcasting
    ... the most users are not interested in mail from the administrators. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... only reply to Newsgroups ...
    (microsoft.public.windows.server.active_directory)
  • Broken Admini Rights
    ... It might be an "Ownershiop" problem, rather than an Admin ... HOW TO Take Ownership of a File or Folder in Windows XP: ... to "Administrators group" instead of "Object Creator". ... >Apparently my Admin rights are bent or broken. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: User rights assignment in XP Pro
    ... >you can add various system rights to users and groups using the Local Security ... all users are currently administrators. ... delete administrators from the list and add power users to it instead. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: New Organizational Unit for a new remote office.
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... EVERY DOMAIN ADMIN IN THE FOREST ...
    (microsoft.public.win2000.active_directory)
Quantcast