All users can start and stop SQL Server?

From: Riki (riki_at_bounce.com)
Date: 02/25/05 

Date: Fri, 25 Feb 2005 14:39:28 +0100

I work for a training center and we have the following scenario:
SQL Server 2000 SP3A is installed on 10 computers in our classroom, under
Windows 2000 SP4 Professional.
The students log on with their own user name.
They are member of the local Administrators group (we trust them on their
own machine).

They are also member of the sysadmin role on their own SQL Server.
We removed the BUILTIN/Administrators login on every SQL Server.

The students cannot access any database on the other machines, which is OK.
But by playing around, they discovered that they are still able to start and
stop any of the other servers.

Is this normal?
Did I overlook something?
What should I do to prevent this?

Riki

Relevant Pages

  • Re: Keeping User From Deleting Table Records
    ... Hugo - Your comment about the user being a member of an admin group did the ... - I have created a new Windows user login in Security/Logins that is ... SQL Server to obtain default settings for the additional configuration ...
    (microsoft.public.sqlserver.security)
  • Re: cannot acees two databases as owner
    ... it does not matter you are a member of the ... the sysadmin fixed server role or if there is no any other Login which is ... group if it's a domain) and you can login to your SQL Server with, ...
    (microsoft.public.sqlserver.setup)
  • Re: permissions not working
    ... at the windows NT level they have sysadmin rights because I did not ... It is likely that the user in question is a member of the Windows ... Administrators group on the SQL Server. ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Login
    ... The sa login account is a member of that role as well. ... Dejan Sarka, SQL Server MVP ... > But how do we add the User X to the sysadmin / ...
    (microsoft.public.sqlserver.security)
  • Re: Permissions WTF - BUILTIN
    ... We recently migrated from an NT4 domain to a Windows 2003 domain. ... My pc and the SQL server have been moved to the new domain. ... Our nt admins have created a new group for the sql admins/developers on the ... > said i was member of db_owner and not srv role sysadmin...but i am getting ...
    (microsoft.public.sqlserver.security)