Re: Remove/Add BUILTIN\Administrators 2000 sp4

DBA449
How does it know that? Where is this information stored?

select loginname from master..syslogins

By default all members of Administrators Group have an access to SQL Server
via this LOGIN

http://vyaskn.tripod.com/sql_server_security_best_practices.htm --------security
best practices





























"DBA449" <DBA449@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3DD8C090-FD3B-48B8-A4E5-9D6BCE4CCED5@xxxxxxxxxxxxxxxx
When I delete the BUILTIN\Administrators login and then re-add it. I get
the
message from Enterprise Manager. "It has been detected that this login has
permissions in specific database(s) - the login will have access to these
databases now. "

How does it know that? Where is this information stored?

My motivation for doing this is that I need to remove access of
BUILTIN\Administrators from all user databases. It is currently mapped to
dbo
in all the user databases. When I attempt to remove BUILTIN\
Administrators
from the dbo role, I get "Can not use the reserved word user or role name
'dbo'.

I already succeeded in changing the dbo for all user databases using
sp_changedbowner to sa. I've also have already searched all new groups for
a
solution. But all of them with a similiar problem end with, "try
sp_changedbowner..."


.

Relevant Pages

  • Wired error of get-credential for non-privilege user
    ... If login as a member of Administrators group, ... Second time you run script: ...
    (microsoft.public.windows.server.scripting)
  • Re: db_owner role in SQL 2k
    ... Try not to say "If sa is THE dbo", it's like saying "If I am the joe". ... might help to either say "If sa is the database owner" or, ... The login 'sa' could be listed in sysdatabases as the database ... FULL permission to do anything and everything. ...
    (microsoft.public.sqlserver.programming)
  • Re: Two DB Owners
    ... full permissions in all databases. ... Note that the user will still be known as the 'dbo' user as long as the ... I need to add the login 'BUILTIN\Administrators' ... > 'DYNGRP' and 'BFGROUP' roles of the Dynamics and DAVCatalog databases. ...
    (microsoft.public.sqlserver.security)
  • Re: How do I set the login name for a user?
    ... You are better to make a dbo roled account (database god?), although that is not my first recommendation for connections. ... name, key name, without login. ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: dbcreator and restore?
    ... I also created a backup after the login was set to ... dbo and that is the backup that i successfully restored. ... >SQL Server MVP ...
    (microsoft.public.sqlserver.security)
Quantcast