Re: Domain Admin group



No it's not needed unless the SQL Admin is also tasked with
administering everything in the network, not just SQL boxes.
Yes they can manage the boxes without being a domain admin.
You'd probably want the SQL Admin to be member of the local
admins group on the boxes where SQL is installed but doesn't
need to be a domain admin.

-Sue

On Wed, 7 Jun 2006 12:00:44 -0700, mtler
<mtler@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Is it a good practice to have SQL admin in the Domain Admin group? Can SQL
admin manage SQL servers without being Domain Admin? Also, our SQL admin
manages 2 node cluster system. Would this have any implications if he is
removed from the Domain Admin group?
Thank you

.



Relevant Pages

  • RE: software to control domain administrators
    ... these so-called controls on the admin. ... what would you do when you need that level of control. ... admin changed the domain admin password when he or she found out that they ... software to control domain administrators ...
    (Security-Basics)
  • Re: Finding a Hacker
    ... compromising the loca or domain admin acocunts, or by elevation, ... to get local admin rights on the machine used by the domain admin, ... If the hacker did get in remotely using an administrator account on ... Your problem is not restricting remote desktop connections. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security Filtering does not work correctly in GPO
    ... administrator object for this GPO. ... I deleted the domain admin profile on the ... where the domain admin was logged on. ... I will now keep track on it, if the administrator receices the settings again. ...
    (microsoft.public.windows.server.active_directory)
  • Re: optional mounts in fstab?
    ... backup power reaches the boxes. ... and need to get thoroughly fscked, will there be an admin capable of dealing ... Since these machines hold backup copies of data, hopefully they don't need to be up immediately. ... If needed there will be someone present to supervise, although if the RAID boxes are connected they could be powered on remotely, manually fsck'd, and mounted. ...
    (Fedora)
  • Re: how to make a user local admin in domain?
    ... > normal user a domain admin in order to give him just local admin??? ... >> Actually, so long as the Dom Admin has previously logged on before, ... Dom Admins are a member of local admins by default. ...
    (microsoft.public.win2000.security)