Re: Permissions WTF - BUILTIN

From: Paul Cahill (anon_at_anon.com)
Date: 11/25/05

  • Next message: Ole Kristian Bangås: "Re: Manage SQL server accross WAN??" 
    Date: Fri, 25 Nov 2005 14:38:11 -0000

    I have had a similar issue.
    We recently migrated from an NT4 domain to a Windows 2003 domain.
    I was using the login olddomain\paulc and I now use newdomain\paulc

    My pc and the SQL server have been moved to the new domain.
    Our nt admins have created a new group for the sql admins/developers on the
    new domain called "Sql Admins". I was an NT Domain Admin on the old domain.
    I have added this new group to sql server however I am being validated as
    BUILTIN\Administrators.

    Any idea why this is? I believe there is an NT trust between the old and
    new domains.

    Regards
    Paul Cahill

    "David J. Cartwright" <davidcartwright@hotmail.com> wrote in message
    news:%23RZ%23ldr6FHA.1248@TK2MSFTNGP14.phx.gbl...
    > Thanks for reply, but it was my stupidity....i had been logged in as the
    > user when i had created the user databases....then forgot it was a member
    > of the group used to create the login.....should have realized it when it
    > said i was member of db_owner and not srv role sysadmin...but i am getting
    > slow at my old age.
    >
    >
    > "Jasper Smith" <jasper_smith9@hotmail.com> wrote in message
    > news:upEiioj6FHA.476@TK2MSFTNGP15.phx.gbl...
    >> You are getting in with sysadmin priviliges, possibly by membership of
    >> another group. What does the following query return for your windows
    >> account?
    >>
    >> exec master..xp_logininfo 'DOMAIN\username'
    >>
    >> --
    >> HTH
    >>
    >> Jasper Smith (SQL Server MVP)
    >> http://www.sqldbatips.com
    >> I support PASS - the definitive, global
    >> community for SQL Server professionals -
    >> http://www.sqlpass.org
    >>
    >> "David J. Cartwright" <davidcartwright@hotmail.com> wrote in message
    >> news:uNI5pih6FHA.3684@TK2MSFTNGP12.phx.gbl...
    >>>I have a intigrated log using a local group
    >>> the login does not have explicit access to any db's and no server roles
    >>> when i log on with query analyzer i can access any data (even though not
    >>> a server admin or anything else)
    >>> when i remove login....can log (as it should be)
    >>> why does this login have full access to all db's ?
    >>>
    >>>
    >>
    >>
    >
    >

  • Next message: Ole Kristian Bangås: "Re: Manage SQL server accross WAN??"

    Relevant Pages

    • Re: Perm. Problem - Must belong to Domain Admins to connect to SQL Ser
      ... using Impersonation on SQL Server. ... member of the Domain Admins. ... A SQL Server user with enough privileges is ... Admins' the application tries to load but won't. ...
      (microsoft.public.windows.server.sbs)
    • Re: permissions not working
      ... at the windows NT level they have sysadmin rights because I did not ... It is likely that the user in question is a member of the Windows ... Administrators group on the SQL Server. ...
      (microsoft.public.sqlserver.security)
    • Re: SQL Server 7 Permissions!
      ... Yes it matters if the user is a member of the Windows ... there is a group added to SQL Server called ... So a member of the administrators group ...
      (microsoft.public.sqlserver.security)
    • Re: Update von SBS2000 auf SBS2003 geht nicht
      ... You must be a member of the Domain Admins, Schema Admins, and Enterprise ... Migrating from Small Business Server 2000 or Windows 2000 Server to Windows ...
      (microsoft.public.de.german.backoffice.smallbiz)
    • Permissions BUILTIN/Administrator
      ... We recently migrated from an NT4 domain to a Windows 2003 domain. ... I was using the login olddomain\paulc and I now use newdomain\paulc ... My pc and the SQL server have been moved to the new domain. ... Our nt admins have created a new group for the sql admins/developers on the ...
      (microsoft.public.sqlserver.security)