Re: Protecting database from administrators

From: Lucio (anonymous_at_discussions.microsoft.com)
Date: 03/31/04 

Date: Wed, 31 Mar 2004 04:46:07 -0800

Hi Hari thank for your answer
How can i remove "System Admin" role from BUILTIN/ADMINISTRATORS account in a Sql Server site where i'm not an administrator?

     
     ----- Hari Prasad wrote: -----
     
     Hi,
     
     You can't restrict the OS administrators fully, because they have full
     rights on all folders and registry keys inwhich SQL server resides.
     But, you can restrict them to an extend by removing "System Admin" role from
     BUILTIN/ADMINISTRATORS account.
     
     
     " I had problems in the below when I removed "Syadmin role" from
     BuildIN/Administrators. So I have given back the sysadmin role to solve the
       issue.
     1. FULL Text Indexing
     
     2. Maintenance Plans
     
     So do a test in test server for couple of weeks and then implement in
     Production server.
     
     Known issues after removal ,
     
     Some things to be aware of:
     
     Q237604 PRB: SQL Server Agent Does Not Start and Displays Error 18456
     Q295034 FIX: MSSearch Takes 100% CPU if BUILTIN\Administrators Removed
     Q317746 PRB: SQL Server Full-Text Search Does Not Populate Catalogs "
     
     Thanks
     Hari
     MCDBA
     
     
     
     
     
     
     Thanks
     Hari
     MCDBA
     
     "Lucio" <anonymous@discussions.microsoft.com> wrote in message
     news:15BE41F9-B847-4BDC-9682-028EB0D82E77@microsoft.com...
> I have to install a database on my customer's site,
> how can i protect it from a system administrator into a site where i'm not
     an administrator?
     
     
     

Relevant Pages

  • Re: Permission question - another one
    ... I would have thought that Administrator ... Are you asking why is it connecting to SQL Server? ... > and I gave BUILTIN/Administrator this database as its default database. ...
    (microsoft.public.sqlserver.programming)
  • Re: Windows Vista Enterprise and SQL Server 2005 Agent
    ... This has nothing to do with SQL Server and this is an expected behaviour of Windows Vista operating systems. ... Cause of those popups and normal-user-like acting is some new security system called User Account Control. ... It all seems to be related to security things, even though I am an administrator. ...
    (microsoft.public.sqlserver.security)
  • Re: Fresh installation and no access
    ... You're not getting access because you're not an administrator when you log ... In previous OS's you had administrator permissions on the database ... You must create a login (to allow connect to SQL Server) then a user to be ...
    (microsoft.public.sqlserver.security)
  • Re: Permission question - another one
    ... SQL Server looks at when you try to connect using Windows Authentication. ... >>> Does your Windows Login TRAVAC/tfs belong to the local Administrators ... >> Are you talking about on Raptor? ... > I am assuming local administrator is in local users and groups from ...
    (microsoft.public.sqlserver.programming)
  • Re: Service Accounts on SQL Server, Best Practices
    ... SQL Server and SQL Server Agent service accounts do not need to be a local administrator or domain administrator for Failover Clustering on Windows 2000 ... If the service account for SQL Server is not an administrator in a cluster, the administrative shares cannot be deleted on any nodes of the cluster. ...
    (microsoft.public.sqlserver.clustering)