Re: Best practice using EM and Windows Authentification

From: Steve Thompson (stevethompson_at_nomail.please)
Date: 11/24/04 

Date: Wed, 24 Nov 2004 11:31:25 -0500

"Freddy" <fromheretoeternity@hotmail.com> wrote in message
news:b9e50d08.0411230826.576b6cf7@posting.google.com...

> We have a team of IT people with mixed profiles.
> If we use windows authentification we should be able to see all our
> SQL Servers but with limited rights (readonly).
> If we use a special admin windows account we should be able to have
> full rights.
>
> How can you accomplish this?

Define a new group that includes all of the accounts that should have full
rights and defined that group on SQL Server and grant system administrator
permissions to that group.

> Allways logged in with my own user account and using EM and Query
> Analyser for readonly stuff and use EM and Query Analyser from time to
> time to change something BUT without logging off on your local machine
> and logging on with your admin account.
>
> Creating different MMC's, runas,...?
> Can anybody point me in the right direction?

Create a short cut to the EM and QA MMC's on the desktops. Train your
admins, when performing administrative activity, on the appropriate MMC use
shift/right click, choose Run As... and enter the administrative credentials
to get full rights.

Steve

Relevant Pages

  • Re: SharePoint Portal Server 2003 and SQL Server
    ... You only need Enterprise if you are considering clustering your SQL servers. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > Standard or do I have to go with the Enterprise Edition? ...
    (microsoft.public.sharepoint.portalserver.development)
  • Re: Must all users be administrators?
    ... The familiar look of the AD objects tree you see in Group Policy Editor is ... This seems modestly confusing to an SBS Administrator because there's very ... those rights happen to be nearly unlimited. ... sit a workstation logged on as the Local Administrator, by default, there ...
    (microsoft.public.windows.server.sbs)
  • RE: The Authentication service is unknown.
    ... The error message "The Authentication service is unknown" ... configured the source domain to trust the target domain. ... * Domain Administrator rights in the target domain. ... Administrator rights on each computer that you migrate. ...
    (microsoft.public.windows.server.migration)
  • Re: Explorer doesnt start anymore
    ... I can boot in safe mode and log on. ... Administrator I created a new user account and ... I was working under a user with limited rights (Windows XP ... explorer (I can see that in task manager), but the task bar doesn't show ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Broken Admini Rights
    ... Tried Retrospect (the backup software) It came back and said I needed administrator rights to run the program. ...
    (microsoft.public.windowsxp.setup_deployment)