Re: Public and Guest



Public is what it sounds like - everybody. All users are part of the public
group so any privileges you grant to public are granted to everybody who
hasn't been deny'ed the privilege. Guest, as you said, is the user that
anyone who doesn't have a user in the database is mapped to. You can assign
any privileges you feel are appropriate for a random anonymous user to have.
I recommend explicitly Denying privileges to the guest user so they don't
accidentally get permissions that someone grants to public.

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"CLM" <CLM@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F3C64B72-F96C-4052-AEA9-BEB4BFBAA323@xxxxxxxxxxxxxxxx
I've got a 2000 server that I want to make sure is within best practices
for
Sql Server 2000. I know that "permissions granted to the public role are
applied to
all users in the database and permissions granted to the guest user
are used by all users who do not have a user account in the database."

The way that my 2000 servers appear to be set up, presumably by default
and
no intervention on my own, are with the guest account assigned to the
public
role. As far as I can tell the public account just has standard select
access to the system tables and nothing else.

Do I have these accounts, public and guest, set up correctly? Is there
something I should do or check? Also, is there anything I should watch
out
for?

Thx...


.



Relevant Pages

  • Re: user accounts - limiting access
    ... Do you mean that this Guest account should not be able ... If you mean the first it is possible but can make the Guest ... in many places (Program Files for example). ... You do not want to interfere with this grant as doing ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How do i make myself the administrator?
    ... Are you logged as a Guest or is your Account configured as a Guest? ... privileges to one with Aministraotr privileges ... Administrator privileges. ...
    (microsoft.public.windowsxp.newusers)
  • Re: Guest unable to start Windows Explorer
    ... I created a User account with LIMITED privileges. ... I changed the privileges the new account to ADMINISTRATOR ... and WinXP started to behave normally again. ... The Guest ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Programmatically allow Lock Pages in Memory
    ... are registered with SCM) could be running under LOCAL SYSTEM ACCOUNT (this ... In this particular case, I'm the administrator, now I ... under Windows platform privileges are assigned to the user ... must grant these privileges to the users along with a constructed ...
    (microsoft.public.platformsdk.security)
  • Re: XP Security
    ... you seem to be having file sharing ... >These must both grant what is being done. ... >account for purposes of checking the NTFS grants. ... >Simple sharing mode this will be a prompt for Guest ...
    (microsoft.public.windowsxp.security_admin)