Re: Can't edit logins or server roles

From: rmunson8 (rmunson8_at_discussions.microsoft.com)
Date: 09/10/04 

Date: Fri, 10 Sep 2004 10:21:02 -0700

This a confusing one. I used is_srvrolemember to determine if
BUILTIN\Administrators is in the sysadmin role, and it is. So then, I used
is_srvrolemember to determine if my windows login is in the sysadmin role and
it is not.

So that would leave me to believe that I am not part of the
BUILTIN\Administrators login. However, if I am part of the machine's windows
Administrators group, I should automatically be part of
BUILTIN\Administrators, right?

"Sue Hoegemeier" wrote:

> A windows local admin may have sysadmin access for a SQL Server
> running on that box as by default SQL Server adds the Windows group
> BUILTIN\Administrators (local admins) and members of this group are
> sysadmins by default. However, that doesn't mean that this can't be
> changed. Some people remove the BUILTIN\Administrators group and
> others have changed what SQL Server server role this group belongs to.
> So on a default installation with nothing changed, a windows local
> admin would have sysadmin access in SQL Server but that can be
> changed. I would guess that this is the case on the server were you
> don't seem to be a member of sysadmins. You can check your role
> membership using IS_MEMBER or IS_SRVROLEMEMBER which are explained and
> documented in books online.
>
> -Sue
>
> On Fri, 10 Sep 2004 08:41:02 -0700, "rmunson8"
> <rmunson8@discussions.microsoft.com> wrote:
>
> >I am running SQL Server 2000 and am a member of the windows Administrators
> >group.
> >
> >In Enterprise Manager, I am unable to get to the Properties of any of the
> >Security Logins, and am unable to view any of the ServerRoles.
> >
> >My understanding is that to do so, I would need to be a member of the
> >sysadmin role, and should be a part of that role by default if I am a member
> >of the windows Administrators group. However, that doesn't seem to be the
> >case.
> >
> >Any ideas why I can't perform any of the sysadmin functions even though I am
> >the computer's admin?
>
>

Relevant Pages

  • Re: Changing SQL Servers Service Account
    ... When xp_cmdshell is invoked by a user who is a member of the sysadmin fixed ... which the SQL Server service is running. ... xp_cmdshell will impersonate the SQL Server Agent proxy ... Microsoft® Windows NT® 4.0 and Windows 2000. ...
    (microsoft.public.sqlserver)
  • Re: A severe error occurred on the current command when running stored
    ... Here is what I have found in a BOL for SQL Server. ... "When sp_help_job is invoked by a user who is a member of the sysadmin fixed ... Microsoft® Windows NT® 4.0 and Windows 2000. ... impersonation and sp_help_job is always executed under the security context ...
    (microsoft.public.dotnet.framework.adonet)
  • Re:can a sysadmin change the win2000 domain admin password ?
    ... >windows and not by SQL Server. ... >to the account on the basis of Authentication(Mixed mode/ ... >>can a sysadmin change the win2000 domain administrator ...
    (microsoft.public.sqlserver.security)
  • Re: How can a non-owner start a job?
    ... Create a job that runs as sysadmin which wakes up fairly frequently ... and checks for some sort of flag. ... "Andrew Drake" wrote in message ... A user who is not a member of the sysadmin role can use ...
    (microsoft.public.sqlserver.security)
  • Re: How to deny SQL administrator to read data.
    ... you cant restrict a user with SYSADMIN role.Even if you deny SYSADMIN ... restrict the user with SYSADMIN role. ...
    (microsoft.public.sqlserver.security)