Re: Permissions not enforced

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 06/29/05

  • Next message: Sue Hoegemeier: "Re: Application Roles ENCRYPT function Valid Password Characters"
    Date: Tue, 28 Jun 2005 22:49:14 -0600
    
    

    By default, the builtin\administrators group is added to SQL
    Server as sysadmins. Members of sysadmins can do whatever
    and bypass any denies.

    -Sue

    On Tue, 28 Jun 2005 13:42:02 -0700, Hoof Hearted
    <HoofHearted@discussions.microsoft.com> wrote:

    >Yes it turns out the account I was testing it with, is a member of the NT
    >administrators group. But I had explicity denied him certain permissions
    >within the database. So I am surprised that his membership of the
    >Administrators group overrides this.


  • Next message: Sue Hoegemeier: "Re: Application Roles ENCRYPT function Valid Password Characters"

    Relevant Pages

    • Re: Rid AD of Circular Group Membership
      ... and have use on members if it is used there. ... Administrators group is still intact), nor do they have empowerments over ... Admins is being used for by the 30+ can be delegated I(ex. ... The quess is each has an account and uses it, ...
      (microsoft.public.windows.group_policy)
    • Re: Adding User ID in Local Admin Group using Group Policy
      ... If you want to add and RESTRICT ... one would not use the Members list, ... The effect is that ClientAdm is added to the Administrators group ... Another useful one -- reset the local admin password while you're at it, ...
      (microsoft.public.windows.group_policy)
    • Re: Adding User ID in Local Admin Group using Group Policy
      ... If you want to add and RESTRICT ... one would not use the Members list, ... The effect is that ClientAdm is added to the Administrators group ... Another useful one -- reset the local admin password while you're at it, ...
      (microsoft.public.windows.group_policy)
    • Local Administrators & Active Directory
      ... I'm working on some Win XP laptops and am new to Active Directory so ... I check the members list in Administrators... ... Any idea why the Administrators group members constantly are being ...
      (microsoft.public.windows.server.active_directory)
    • Re: Restricted Group not working as expected
      ... in the local administrators group in each of the computers in the domain. ... Add myself into a domain group called "Admin" ... I leave blank for "Members of this group". ...
      (microsoft.public.windows.group_policy)