Re: User who does not exist in Enterprise Manager has full access

From: Jasper Smith (jasper_smith9_at_hotmail.com)
Date: 05/06/05

  • Next message: Bill: "Re: User who does not exist in Enterprise Manager has full access" 
    Date: Fri, 6 May 2005 01:33:38 +0100

    There is a group called BUILTIN\Administrators in a default sql install that
    is a member of the sysadmin server role. By default, all members of the
    Local Administrators group on the server will be sysadmins in sql via this
    group. You can use the system stored procedure xp_logininfo to see the
    permission path of a login e.g.

    exec master..xp_logininfo 'login name' 

    -- 
HTH
Jasper Smith (SQL Server MVP)
http://www.sqldbatips.com
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Bill" <no@no.com> wrote in message 
news:u4fEUFdUFHA.3076@TK2MSFTNGP12.phx.gbl...
>I am very confused. I have a Win2k server with SQL Server 2000
> installed. SQL Server is configured for both Windows and SQL server
> authentication. In addition to Administrator I have created two
> additional users, Fred and Ethel. Both are members of the
> Administrators group.
>
> Fred installed SQL Server and restored a backup of a database that was
> created on another system. In Enterprise manager Fred appears in both
> Database | Logins and in Database | Users.
>
> If Ethel logs into the Win2k server and opens EM she has full access to
> the database. Why?
>
> I thought that a Windows login had to be explicitly added to Security |
> logins in SQL Server before that user could access SQL Server, let
> alone any database.
>
> What am I missing?
>
> Can someone provide a reference to a clear explanation of how Windows
> authentication really works and what the steps are to grant a Windows
> user access to SQL Server and a specific database?
>
> -- 
> _Bill_
  • Next message: Bill: "Re: User who does not exist in Enterprise Manager has full access"

    Relevant Pages
    Loading