Re: db_owner

Is there a way to disable all of the 'guest' accounts in all of the system
and user databases since I noticed this Microsoft article recommends not to
remove the 'guest' account
http://support.microsoft.com/default.aspx/kb/315523

Thanks Dan.


"Dan Guzman" <guzmanda@xxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:740E18FB-57E3-4F74-84B4-8327509943F9@xxxxxxxxxxxxxxxx
All logins can access databases with the guest user enabled. This
includes sample and system databases but permissions in the system
databases are minimal.

--
Hope this helps.

Dan Guzman
SQL Server MVP

"zz12" <IDontLikeSpam@xxxxxxxxxxx> wrote in message
news:O0%23a8Y5NIHA.3852@xxxxxxxxxxxxxxxxxxxxxxx
I just created a Windows domain user something like 'DomainAUser\JoeTest'
and assigned him to the db_owner role to one of our user created
databases. When I set up an odbc or .udl using this Windows domain user
credentials how come this user is able to see our system databases and a
couple other in the default database drop down box which kind of is
concerning.

Thanks.


"Dan Guzman" <guzmanda@xxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:26708F07-A4D5-41EB-BDE9-169A201295A4@xxxxxxxxxxxxxxxx
Yes, db_owner will pretty much give the consultant full control but only
within that database.

--
Hope this helps.

Dan Guzman
SQL Server MVP

"zz12" <IDontLikeSpam@xxxxxxxxxxx> wrote in message
news:e5sNUtgNIHA.5860@xxxxxxxxxxxxxxxxxxxxxxx
Hello. What would be the best role assignment for a temporary
consultant to access one of our user created databases on our sql2k
server to allow this person to develop freely but only within this
database and not any of our other databases including the obvious
system databases? Would it be ok to give this consultant a windows
domain login and assign it as a db_owner or would assigning a
combination of the other system roles within this db be better?

Thanks in advance.







.

Relevant Pages

  • Re: How can I remove Public access to SQL Express dbs?
    ... Guest has no CONNECT permission in user databases by default. ... You can't delete guest but can render it unusable by revoking CONNECT permission in databases other than master and tempdb. ... it will remove the public access of the database in question. ...
    (microsoft.public.sqlserver.security)
  • Re: How can I remove Public access to SQL Express dbs?
    ... You can't delete guest but can render it unusable by revoking ... CONNECT permission in databases other than master and tempdb. ... it will remove the public access of the database in question. ...
    (microsoft.public.sqlserver.security)
  • Re: select from one db only
    ... Those databases are available to anyone who can login to the server because ... You should never remove guest from master ...
    (microsoft.public.sqlserver.security)
  • Re: ODBC, alias an SQL Server Login error
    ... Tibor Karaszi, SQL Server MVP ... "Dave" wrote in message ... > is aliased or mapped to a user in one or more databases. ... > I am trying to create all new accounts for a new database. ...
    (microsoft.public.sqlserver.programming)
  • Re: Guest Account
    ... > The guest accout is a way for people to access a database - NOT the sever. ... > There is no login that is directly associated with guest... ... > As for the guest account in Northwind/Pubs - yes, ... > databases are sample databases - for learning. ...
    (microsoft.public.sqlserver.security)