What commands can a user execute

I have user access SQL Server 2005 via a Windows NT Group which is not mapped
to any server roles but is a db_owner in almost all databases. I just
learned from a security monitoring script which logs security events that a
member from this NT Group created and dropped a database. How ???
Inspecting sp_srvrolepermission
and sp_dbfixedrolepermission I find that only the dbcreation server role has
the permission to create/drop a database which, again, my NT Group is not
mapped to.
How do I determine an NT Groups permissions and more importantly, which
commands they can execute ? Thanks. -CqlBoy

fn_my_permissions(NULL, 'Database')
sp_srvrolepermission
sp_dbfixedrolepermission

select sl.*
from master.sys.syslogins sl
left join sys.database_role_members rm on
user_name(rm.member_principal_id) = sl.loginname
.

Relevant Pages

  • Re: permission problem
    ... These are server roles. ... You have to create on the specific database you are talking about. ... "Caminar sobre el agua y desarrollar software a partir de unas ...
    (microsoft.public.sqlserver.programming)
  • RE: Security Problem with AD Group in SQL Server Security Logins area
    ... Second problem - if I uncheck that Server Role and leave all the Server Roles ... I can use the Database Access tab to configure who has access to the ... I see dbo ...
    (microsoft.public.sqlserver.security)
  • Re: What commands can a user execute
    ... mapped to any server roles but is a db_owner in almost all databases. ... just learned from a security monitoring script which logs security ... events that a member from this NT Group created and dropped a database. ... Links for SQL Server Books Online: ...
    (microsoft.public.sqlserver.security)
  • Re: SBS2003 and SQL
    ... All have server roles as ... >Do you have your domain account listed? ... >on it to open the properties page and go to the Database ... >> either group or user with admin access. ...
    (microsoft.public.windows.server.sbs)
  • Re: Script Database Roles, Application Roles, Server Roles
    ... On Dec 14, 10:08 pm, Tim Patterson <Tim ... and server roles for a SQL Server 2005 database. ... Please help me create tsql script to complete task using the adventureworks ...
    (microsoft.public.sqlserver.security)