Re: SQL Server 7 Permissions!

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 03/02/05

  • Next message: Dan Guzman: "Re: How to implement Application Roles for an application?" 
    Date: Tue, 01 Mar 2005 18:36:44 -0700

    Yes it matters if the user is a member of the Windows
    Administrators group.
    By default, there is a group added to SQL Server called
    BUILTIN\Administrators which is the local admins group on
    the server. The default is for the group to be a member of
    the sysadmin role. So a member of the administrators group
    is a sysadmin if using the default groups and roles.
    You can change the default behavior but whether you have
    problems or not depends. The following article has an more
    information section with links to some issues that could
    come up:
    INF: How to impede Windows NT administrators from
    administering a clustered instance of SQL Server
    http://support.microsoft.com/?id=263712

    -Sue

    On Tue, 01 Mar 2005 10:25:52 -0800, "b@man.com" <b@man.com>
    wrote:

    >Hi!
    >
    >The user is the user I'm using (checked) and is not sysadmin. However,
    >he is a member of Windows Administrators. Is it really an issue? Can't
    >I deny access from a win. admin.?
    >
    >Tibor Karaszi wrote:
    >
    >> Perhaps the user is sysadmin? Or member of the Windows Administrators
    >> group? Also, check that the user is really logged in as who you think
    >> (SELECT SYSTEM_USER).

  • Next message: Dan Guzman: "Re: How to implement Application Roles for an application?"

    Relevant Pages

    • Re: OU Administrator setup/Admin Shares
      ... My mistake on the Windows 2000 PC, it was not a member of my test OU. ... The $ shares are shared out to local administrators ... Create the gpo in the ou where the Computers reside, ...
      (microsoft.public.windows.server.active_directory)
    • Re: Group Policy
      ... Your data should be on a file server - the TS box should be nothing ... Windows Server group, as I was actually talking about AD ... You can edit domain policies from a member server (or a workstation, ... and it wouldn't affect your administrators. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Network Administrative Privelages
      ... I have a Windows 2003 R2 member server on a Windows 2000 native domain. ... administrators to do everything, however, as for my Windows 2003 R2 ...
      (microsoft.public.windows.server.active_directory)
    • Re: cannot acees two databases as owner
      ... member of the built-in group Administrators, is not sysadmin. ... Administrator of SQL Server. ...
      (microsoft.public.sqlserver.setup)
    • Re: permissions not working
      ... at the windows NT level they have sysadmin rights because I did not ... It is likely that the user in question is a member of the Windows ... Administrators group on the SQL Server. ...
      (microsoft.public.sqlserver.security)