Re: Prevent Adminstrator Group Access

From: Jens Süßmeyer (Jens_at_Remove_this_For_Contacting.sqlserver2005.de)
Date: 05/27/05 

Date: Fri, 27 May 2005 20:18:54 +0200

If you don´t wanna move them out of the service administrators group you
have to map the administrator to the database and deny the executing of the
procedures to them. But beware that if they are in the group of the
administrator they won´t have access even you explicitly allow them to use
the procedures (deny overwrites all allows) 

-- 
HTH, Jens Suessmeyer.
---
http://www.sqlserver2005.de
---
"Lionel Horn" <lhorn@newsgroup.nospam> schrieb im Newsbeitrag 
news:36A1F263-94DA-45CA-B862-193E4D9E9E4E@microsoft.com...
>I have a stored procedure that I do not want administrators to run.  I need
> to prevent the Windows group "BUILTIN\Administrators" from running the 
> stored
> procedure.
>
> I have a stored procedure to view credit card information.  Only select
> domain users need access to the data.  Domain Administrators should not be
> able to see the data, though they can see everything else.  My server is
> setup for mixed-mode authentication.
>
> Please advise if this is possible.   Thanks!
>
> -- 
> Lionel Horn

Relevant Pages

  • Re: MMC - admin locked out too
    ... just use the Deny trick to exempt ... from an admin account before it can edit policy, ... > Limit access to Regedit, MMC, command line, etc. & ... > restrict such items to Administrators only. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: I need a permission GURU!
    ... Administrators and Users are two separate groups and "deny" to users ... > permissions on a file or folder in either OS to lock out members of ... > Its as if all accounts fall under the "users" group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... I probably should have added that the Deny is used here ... granted to Administrators would also do this, ... and granted permissions for all of those other accounts. ... > the Deny column for the Full Control line. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... I would appreciate a clarification about using the "Deny of Full ... Control for the Administrators." ... Full Control for the Administrators, I right clicked on the windows/system32 ... When I closed MMC, now, even I can't get to ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Setting user security in XP Pro
    ... > accounts and not the Admin account. ... If you set a Deny of Full Control for Administrators on ... be able to modify local policy. ... When you want to adjust the settings, remove the Deny, ...
    (microsoft.public.windowsxp.security_admin)