Re: All users can start and stop SQL Server?
From: Riki (riki_at_nospam.com)
Date: 02/25/05
- Next message: RobinMC: "update passwords for copied logins"
- Previous message: Jim: "RE: Security Problem - Permission denied"
- In reply to: Geoff N. Hiten: "Re: All users can start and stop SQL Server?"
- Next in thread: Simon: "Re: All users can start and stop SQL Server?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 25 Feb 2005 18:48:04 +0100
Thanks for your response, Geoff.
I wasn't aware that starting and stopping a SQL Server
doesn't have anything to do with SQL Server Permissions.
Riki
Geoff N. Hiten wrote:
> Sounds normal. Removing the role prevented them from accessing the
> data within the SQL server. SQL runs as a service and any local
> administrator can stop and start any service. Treat it as a learning
> opportunity. Learning to be careful when you are a local
> administrator on a SQL server host computer is a very important skill.
>
>
> "Riki" <riki@bounce.com> wrote in message
> news:ueJ$t9zGFHA.1528@TK2MSFTNGP09.phx.gbl...
>> I work for a training center and we have the following scenario:
>> SQL Server 2000 SP3A is installed on 10 computers in our classroom,
>> under Windows 2000 SP4 Professional.
>> The students log on with their own user name.
>> They are member of the local Administrators group (we trust them on
>> their own machine).
>>
>> They are also member of the sysadmin role on their own SQL Server.
>> We removed the BUILTIN/Administrators login on every SQL Server.
>>
>> The students cannot access any database on the other machines, which
>> is OK. But by playing around, they discovered that they are still
>> able to start and stop any of the other servers.
>>
>> Is this normal?
>> Did I overlook something?
>> What should I do to prevent this?
>>
>> Riki
-- Riki
- Next message: RobinMC: "update passwords for copied logins"
- Previous message: Jim: "RE: Security Problem - Permission denied"
- In reply to: Geoff N. Hiten: "Re: All users can start and stop SQL Server?"
- Next in thread: Simon: "Re: All users can start and stop SQL Server?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|