Local Admin group necessary for DBA's?

From: Johnnie Scott (JohnnieScott_at_discussions.microsoft.com)
Date: 11/03/04


Date: Tue, 2 Nov 2004 19:24:06 -0800

Assume that the DBA's windows login is in the sysadmin fixed server role, if
a DBA uses Windows Authentication to manage a SQL Server Enteriprise
(6.5,7.0,200), are there any problems with removing the DBA's account from
the local administrators group of each SQL Server?

Any supporting documentation or articles for removing the DBA from the admin
Group?

Any expected annoyances for the DBA?



Relevant Pages

  • Re: Local Admin group necessary for DBAs?
    ... rights on all folders and registry keys inwhich SQL server resides. ... you can restrict them to an extend by removing "System Admin" role ... > a DBA uses Windows Authentication to manage a SQL Server Enteriprise ...
    (microsoft.public.sqlserver.security)
  • Re: sql transactions per second
    ... good sense of app server and web server hit counts and capacity needs, ... SQL Server to the max, and what their SQL transaction per second count is. ... before all other hardware constrains growth). ... Be prepared to hire a really good DBA who knows how ...
    (microsoft.public.sqlserver.server)
  • Re: Help! Set up Windows Group to access application
    ... Analyzer to set up a new windows login and a new group and corresponding ... The connection string for a trusted connection is: ... tries to access any Crystal Report (I use stored procedures in Sql Server ... If you have troubles with finding your ways in Crystal Reports, ...
    (microsoft.public.sqlserver.security)
  • Re: Among available RDBMS. When to use ...
    ... "When these new options are not set, SQL Server 2005 default database ... Given that Oracle's multiversioning has long outperformed SQL Server, ... is it possible to keep DBA? ... I would think an ISV needs a DBA more, ...
    (comp.databases)
  • Re: Is there any way to prevent hacker trying to guess sa password?
    ... now the SQL injection attacks and/or crash the service attacks need ... to be address separately (no real DBA options here). ... The proper way to secure this though isn't in SQL Server per se. ... Microsoft's putting a lot of effort into security. ...
    (microsoft.public.sqlserver.security)

Quantcast