Re: Windows Authentication, Which Accounts? (newbie)

From: Jasper Smith (jasper_smith9_at_hotmail.com)
Date: 08/18/03


Date: Mon, 18 Aug 2003 22:52:01 +0100


If there is a login called BUILTIN\Administrators in MSDE then any members
of the local administrators group on the PC has access and by default
sysadmin rights. This account can be removed but make sure you set up a
dedicated group or login in advance that has sysadmin access (and that
you're in) to make sure you don't "lock yourself out" after removing the
login.Also make sure the SQL Service account (and SQL Agent Service account
if different) have sysadmin access. Depending on how these were set up the
required login(s) may already exist. Other than that, unless you have
explicitly add any NT users or groups then they won't have access

-- 
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Tom Wells" <noemail@nowhere.none> wrote in message
news:OR3toCcZDHA.2284@TK2MSFTNGP12.phx.gbl...
Hi SQL Server Newbie Here,
How do I tell which domain accounts can access and especially administer
a SQL Server instance?
When I say administer I mean use the SQL Server Enterprize Manger. The
instance is a copy of MSDE 2000. It's letting me in but I want to know
who else can get in.
Thanks
Tom


Relevant Pages

  • Re: I have now probably done a very silly thing
    ... I already knew what I was searching for which is 99% of the problem. ... the document that you passed in the mail and now I have granted the the relevant user back to the sysadmin server role. ... The 'best practice' is that SQL Server runs under domain account and not as Local Admin, but I am seeing lot of business that do the oppoiste:-) ...
    (microsoft.public.sqlserver.programming)
  • RE: Upgrade from 2005 to 2008: Invalid Credentials
    ... it seems that this issue was related to NETWORK SERVICE account for SSIS service could not be validated on DC. ... Please first go to your Services pane, double click your SQL Server Integration Services, switch to the Log On tab to check if the service account is NETWORK SERVICE account. ... Install SQL Server 2008 from the Command Prompt ... Microsoft Online Community Support ...
    (microsoft.public.sqlserver.setup)
  • Re: Error 0x80070534 when changing service account
    ... The only solution that I have been able to find for this error is to RDP into the SQL Server using the new Service account you want the SQL server to run under. ... prefix, an error 0x80070056 "The specified network password is not correct." ...
    (microsoft.public.sqlserver.security)
  • Re: SPN Requirement
    ... The service account for SQL Server needs to be a domain ... account to allow Write Public Information rights but I'd ... The SQL Network Interface library could not register the Service Principal ... Name for the SQL Server service. ...
    (microsoft.public.sqlserver.security)
  • Re: Question about "Distribution clean up: distribution" Job
    ... I granted the SQL Server Service Account "Full Control" over ... the Snapshot Folder and the job has been running successfully ever since. ... Then I went into the job step and copied the command it was ...
    (microsoft.public.sqlserver.replication)