Re: GRANT CREATE DATABASE versus GRANT ALTER ANY LOGIN

Hi Peter -

Well, sort of :-). I am allowed to do a "GRANT CREATE DATABASE TO", but
not allowed to do a "GRANT ALTER ANY LOGIN TO".

I have checked, and the builtin\administrator group still exists in SQL
server, and is a member of the sysadmin server role.


Regards,

Joe


"Peter Yang [MSFT]" <petery@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:6h$5$PNfHHA.4692@xxxxxxxxxxxxxxxxxxxxxxxxx
Hello Joe,

I understand that you log into SQL Server 2005 as a local admin but you
could not grant "alter any login" permission to a domain login. If I'm
off-base, please let me know.

I suspect "buitin\Administrators" group might have been removed from the
server or it has been removed "sysadmin" server role.

You may want to login as a domin user or sql login with sysadmin role,
grant yourself "sysadmin" role, and test it again

EXEC sp_helpsrvrolemember 'sysadmin'

EXEC sp_addsrvrolemember 'domain\username', 'sysadmin'

If you have any update, please feel free to let me know. Thank you.

Best Regards,

Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support

Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications
<http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx>.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
<http://msdn.microsoft.com/subscriptions/support/default.aspx>.
==================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.





.

Relevant Pages

  • RE: GRANT CREATE DATABASE versus GRANT ALTER ANY LOGIN
    ... could not grant "alter any login" permission to a domain login. ... You may want to login as a domin user or sql login with sysadmin role, ... Microsoft Online Community Support ...
    (microsoft.public.sqlserver.security)
  • RE: Distributed query
    ... If you would like to use Windows login without AD to access linked servers, ... First create a login on the remote server, double click the login, switch ... Microsoft Online Community Support ...
    (microsoft.public.sqlserver.security)
  • RE: Login Error: 18456, Severity: 14, State:11
    ... The problem is the Login is denied. ... The SQL server error log shows the lines: ... The ONLY permission that permits login is the 'Control Server' permission. ... Microsoft Online Community Support ...
    (microsoft.public.sqlserver.security)
  • Re: SQL 2005 Express setup
    ... Connect to your SQL Server Instance, ... Double click on the Login that you want to add to the "sysadmin" server ... Mark the "sysadmin" checkbox to make this Login a member of this Server ...
    (microsoft.public.sqlserver.setup)
  • Re: Client cant see login box?
    ... I get a login challenge for that link ... To find the best Newsgroup for FrontPage support see: ... |>you're trying to do on,presuming a Windows server?). ... |>and yes, I cleaned out history, internet cache and temp internet files; ...
    (microsoft.public.frontpage.client)