Re: All users can start and stop SQL Server?

From: Riki (riki_at_nospam.com)
Date: 02/25/05


Date: Fri, 25 Feb 2005 18:48:04 +0100

Thanks for your response, Geoff.
I wasn't aware that starting and stopping a SQL Server
doesn't have anything to do with SQL Server Permissions.

Riki

Geoff N. Hiten wrote:
> Sounds normal. Removing the role prevented them from accessing the
> data within the SQL server. SQL runs as a service and any local
> administrator can stop and start any service. Treat it as a learning
> opportunity. Learning to be careful when you are a local
> administrator on a SQL server host computer is a very important skill.
>
>
> "Riki" <riki@bounce.com> wrote in message
> news:ueJ$t9zGFHA.1528@TK2MSFTNGP09.phx.gbl...
>> I work for a training center and we have the following scenario:
>> SQL Server 2000 SP3A is installed on 10 computers in our classroom,
>> under Windows 2000 SP4 Professional.
>> The students log on with their own user name.
>> They are member of the local Administrators group (we trust them on
>> their own machine).
>>
>> They are also member of the sysadmin role on their own SQL Server.
>> We removed the BUILTIN/Administrators login on every SQL Server.
>>
>> The students cannot access any database on the other machines, which
>> is OK. But by playing around, they discovered that they are still
>> able to start and stop any of the other servers.
>>
>> Is this normal?
>> Did I overlook something?
>> What should I do to prevent this?
>>
>> Riki

-- 
Riki 


Relevant Pages

  • Re: SQL question
    ... I use ASP.NET with MS SQL Server Express 2005. ... Select a date in a specific format: ... SET DATEFORMAT dmy ... Riki ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: SQL Server 2000 vs SQL Server Express
    ... want to 'port' it to use SQL Server Express, ... What is the difference between SQL Server 2000 and SQL Server ... Just change the connection string. ... Riki ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Permission question - another one
    ... I would have thought that Administrator ... Are you asking why is it connecting to SQL Server? ... > and I gave BUILTIN/Administrator this database as its default database. ...
    (microsoft.public.sqlserver.programming)
  • Re: Keeping User From Deleting Table Records
    ... Hugo - Your comment about the user being a member of an admin group did the ... - I have created a new Windows user login in Security/Logins that is ... SQL Server to obtain default settings for the additional configuration ...
    (microsoft.public.sqlserver.security)
  • Re: cannot acees two databases as owner
    ... it does not matter you are a member of the ... the sysadmin fixed server role or if there is no any other Login which is ... group if it's a domain) and you can login to your SQL Server with, ...
    (microsoft.public.sqlserver.setup)