Re: Lock out 1 user within Enterprise Manager

From: Andrew J. Kelly (sqlmvpnoooospam_at_shadhawk.com)
Date: 02/24/04 

Date: Mon, 23 Feb 2004 22:20:14 -0500

If they don't have sa or dbo rights they wont be able to change permissions. 

-- 
Andrew J. Kelly  SQL MVP
<anonymous@discussions.microsoft.com> wrote in message
news:1567901c3fa5b$c5789d90$a501280a@phx.gbl...
> Thanks!! How do I make sure they don't go into EM and
> give themselves the rights back again?
> >-----Original Message-----
> >Don't give the user sysadmin privileges on the database.
> >Make this person a member of the datareader role in the
> database they need
> >access to and no other role membership other than public
> and no permissions
> >explicitly.
> >Bill
> >
> >"CPS" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:14e2f01c3fa26$40d04c80$a001280a@phx.gbl...
> >> I have one rogue user who constantly creates, deletes,
> >> and just does things in the system that are not
> >> authorized causing tons of administrative work on my
> >> end.  Is there a way to allow this user ONLY to READ
> >> everything from within SQL-EM, vs. writing or creating
> >> anything.  All this person does is Crystal reports, so
> I
> >> might just remove the software altogether.  But I'd
> like
> >> to restrict rights because they'll definitely come tell
> >> me that they couldn't do something due to restriction,
> at
> >> which point I can bust them.  Thanks!
> >
> >
> >.
> >

Relevant Pages

  • Re: HELP with GPO security
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... I can't open Active Directory as domain admin to make any changes on = ... no way to change permissions, ...
    (microsoft.public.win2000.active_directory)
  • Re: Deny account admins rights to change mailbox permissions
    ... I would be very surprised if View-Only Administrator role grants the right ... in a group that otherwise has rights to do this. ... groups that they're in and see if any have rights on the mailbox store, ... I have tried to deny the rights to change permissions ...
    (microsoft.public.exchange.admin)
  • Re: Must Use Updateable Query
    ... Are you giving those rights to the correct user? ... this should tell you who you are dealing with: ... > What security settings am I missing and how in the world can I set them in ... >> change permissions on the file and directory. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: No rights after a user delete
    ... Sorry - How do you take ownership and change permissions? ... >> How do they recover the rights or assign new rights to ... >> this folder or files? ...
    (microsoft.public.win2000.security)
  • Re: Lock out 1 user within Enterprise Manager
    ... >Don't give the user sysadmin privileges on the database. ... >Make this person a member of the datareader role in the ... >> to restrict rights because they'll definitely come tell ...
    (microsoft.public.sqlserver.security)