Re: Protecting database from administrators

From: Hari Prasad (hari_prasad_k_at_hotmail.com)
Date: 03/27/04

  • Next message: ZSL: "Re: Protecting database from administrators" 
    Date: Sun, 28 Mar 2004 00:00:13 +0530

    Hi,

    You can't restrict the OS administrators fully, because they have full
    rights on all folders and registry keys inwhich SQL server resides.
    But, you can restrict them to an extend by removing "System Admin" role from
    BUILTIN/ADMINISTRATORS account.

    " I had problems in the below when I removed "Syadmin role" from
    BuildIN/Administrators. So I have given back the sysadmin role to solve the
      issue.
    1. FULL Text Indexing

    2. Maintenance Plans

    So do a test in test server for couple of weeks and then implement in
    Production server.

    Known issues after removal ,

    Some things to be aware of:

    Q237604 PRB: SQL Server Agent Does Not Start and Displays Error 18456
    Q295034 FIX: MSSearch Takes 100% CPU if BUILTIN\Administrators Removed
    Q317746 PRB: SQL Server Full-Text Search Does Not Populate Catalogs "

    Thanks
    Hari
    MCDBA

    Thanks
    Hari
    MCDBA

    "Lucio" <anonymous@discussions.microsoft.com> wrote in message
    news:15BE41F9-B847-4BDC-9682-028EB0D82E77@microsoft.com...
    > I have to install a database on my customer's site,
    > how can i protect it from a system administrator into a site where i'm not
    an administrator?

  • Next message: ZSL: "Re: Protecting database from administrators"

    Relevant Pages

    • Re: Permission question - another one
      ... I would have thought that Administrator ... Are you asking why is it connecting to SQL Server? ... > and I gave BUILTIN/Administrator this database as its default database. ...
      (microsoft.public.sqlserver.programming)
    • Re: Windows Vista Enterprise and SQL Server 2005 Agent
      ... This has nothing to do with SQL Server and this is an expected behaviour of Windows Vista operating systems. ... Cause of those popups and normal-user-like acting is some new security system called User Account Control. ... It all seems to be related to security things, even though I am an administrator. ...
      (microsoft.public.sqlserver.security)
    • Re: Fresh installation and no access
      ... You're not getting access because you're not an administrator when you log ... In previous OS's you had administrator permissions on the database ... You must create a login (to allow connect to SQL Server) then a user to be ...
      (microsoft.public.sqlserver.security)
    • Re: Permission question - another one
      ... SQL Server looks at when you try to connect using Windows Authentication. ... >>> Does your Windows Login TRAVAC/tfs belong to the local Administrators ... >> Are you talking about on Raptor? ... > I am assuming local administrator is in local users and groups from ...
      (microsoft.public.sqlserver.programming)
    • Re: Service Accounts on SQL Server, Best Practices
      ... SQL Server and SQL Server Agent service accounts do not need to be a local administrator or domain administrator for Failover Clustering on Windows 2000 ... If the service account for SQL Server is not an administrator in a cluster, the administrative shares cannot be deleted on any nodes of the cluster. ...
      (microsoft.public.sqlserver.clustering)