Re: Windows Power User SQL
- From: Erland Sommarskog <esquel@xxxxxxxxxxxxx>
- Date: Wed, 25 Mar 2009 15:53:27 -0700
Sammy (Sammy@xxxxxxxxxxxxxxxxxxxxxxxxx) writes:
On one of our Sql 2005 servers someone added a user to a server as a
windows power user with permission to log onto the server and have given
them permission to just read and write on one database.
They have been able to backup a database and view the list of tables on a
linked server.
How can I find out the whole list of permissions the user has on the sql
server as checking the actual permissions they only have read and write
permissions on one database and are not a member of any server roles.
If the user(s) have admin rights in Windows, they will map to the
group BUILTIN\Administrators which will give them sysadmin rights in
SQL Server, which means that they can do anything.
One solution could be to remove BUILTIN\Administrators, but before you
do that, make sure that there are users in the sysadmin role, or that
you know the sa password, else you will be in trouble.
--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx
Links for SQL Server Books Online:
SQL 2008: http://msdn.microsoft.com/en-us/sqlserver/cc514207.aspx
SQL 2005: http://msdn.microsoft.com/en-us/sqlserver/bb895970.aspx
SQL 2000: http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
.
- References:
- Windows Power User SQL
- From: Sammy
- Windows Power User SQL
- Prev by Date: Windows Power User SQL
- Next by Date: Re: Windows Power User SQL
- Previous by thread: Windows Power User SQL
- Next by thread: Re: Windows Power User SQL
- Index(es):
Relevant Pages
|
