Re: Is It Necessary To Include A DBA in the Administrator's Group?

From: Jeff Cochran (jcochran.nospam@naplesgov.com)
Date: 01/22/03 

From: jcochran.nospam@naplesgov.com (Jeff Cochran)
Date: Wed, 22 Jan 2003 13:00:27 GMT

Administering SQL and administering the server are two different
things. In our situation, the DBA's also admin the servers, but we
don't have a separate network group and database group. Personally,
I'm not sure I'd work long at a company that was that territorial, but
in larger installations it may be necessary.

Jeff

>Just curious though. How would the DBA's administer their SQL servers
>without having admin access to their own SQL servers?
>
>"Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message
>news:#EjfdRcwCHA.1620@TK2MSFTNGP11...
>> None that I can think of. Make the DBA enumerate why the access is needed.
>> We have many DBA's around the world and most of them don't even have admin
>> access to the DB Servers let alone AD.
>>
>> --
>> ---
>> Joe Richards
>> www.joeware.net
>> ---
>> "mike" <mike2002am@yahoo.com> wrote in message
>> news:gpednahDXK0ilbOjXTWcrg@comcast.com...
>> > We got a small shop with 3 SQL2K servers on WIN2K Advanced Servers.
>> > Our DBA is requesting to Administrative rights on the Active Directory.
>> > Are there any valid reasons for the Network group to provide him with
>such
>> > an access?
>> >
>> > Thank you very much
>> >
>> >
>> >
>>
>>
>

Relevant Pages

  • Re: Renaming Admin ID - Making Sys Admins Accountable
    ... If they are 2003 member servers then you have remote access via the /console ... I think their point was that these apps dont necessarily need ... > that power user to do admin tasks because the apps have to always be ... >> /console and remotely run the console and still keep your two sessions up ...
    (microsoft.public.win2000.active_directory)
  • RE: managing servers...
    ... as an example, i have 10-15 servers... ... know that the boxes are corectly setup for the given functions.. ... and some other functionality would be ... An admin that relies on such tools ...
    (Fedora)
  • Re: Forest to Child -- Permissions
    ... first DC in the root. ... the member servers only ... DCDiag pretty much confirms authentication AND that DNS is right. ... never happen unless some admin has been mucking about. ...
    (microsoft.public.windows.server.dns)
  • Re: Inheriting network, first steps?
    ... PS. step 0 diable VPN access until you have time for step 4 ... determine that you can log in with the highest admin rights on each box ... Domain controllers first, critical servers next, etc. ... inventory all accounts with admin rights, ...
    (microsoft.public.windows.server.security)
  • Re: Inheriting network, first steps?
    ... determine that you can log in with the highest admin rights on each box ... Domain controllers first, critical servers next, etc. ... inventory all accounts with admin rights, ...
    (microsoft.public.windows.server.security)