RE: Stop Admin from disabling database trigger


Unfortunately, if he is a member of the sysadmin server role there is no way
to remove those specifics permissions from him.

Hope this helps,

Ben Nevarez
Senior Database Administrator
AIG SunAmerica



"Cqlboy" wrote:

I have a user using Windows Auth' to access our SQL Server 2005 box. He's
been granted a sysadmin server role permission. Can I control permissions in
some way so he doesn't have the rights to execute DISABLE TRIGGER on one of
my database triggers?

I've tried the following below and none prevent this person from executing
DISABLE TRIGGER.

DENY CONTROL SERVER
DENY CONTROL
DENY ALTER ANY DATABASE DDL TRIGGER

Anyone have any ideas other then pulling them from the sysadmin role?
-CqlBoy

.