Re: SQL Administration without Local Admin privilege
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 11/06/04
- Next message: Roger Abell: "Re: Domain Local group and Require strong. GPO Problem"
- Previous message: Roger Abell: "Re: Erase Password List on windows2000 PC"
- In reply to: -Sari: "SQL Administration without Local Admin privilege"
- Next in thread: -Sari: "Re: SQL Administration without Local Admin privilege"
- Reply: -Sari: "Re: SQL Administration without Local Admin privilege"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 6 Nov 2004 00:55:50 -0700
As I read your post, some objectives can and some
cannot be accomplished. Comments within . . .
-- Roger Abell Microsoft MVP (Windows Server System: Security) MCSE (W2k3,W2k,Nt4) MCDBA "-Sari" <Sari@discussions.microsoft.com> wrote in message news:4F981EC8-F19B-4607-9AF3-B71F0AED55D9@microsoft.com... > Hi all, > > I would like to accomplish the following task without giving access to the > SQL Cluster server. I don't know it is possible or not. Following are the > things DBA would like to perform on a SQL cluster box. > > Single User Mode testing You would need to give the accounts full control over the services of SQL so that they could stop and start them to bring SQL up in single user mode. > MSSQL Folder Access This is only ACLing on the filesystem level > Cluster Administration You did not limit this to any specific aspects, so in general this is, like it says, "Administration" and will need Administrator access on the involved machines > Restart the SQL Machine same as for running SQL in single user mode if by the SQL Machine you mean SQL, else server operators has ability to reboot a machine and there is a user right governing this ability > Install Service Packs/hot fix This requires Adminstrators level access, but you could leverage service delivery mechanisms so that they do not need to initiate service application. > > Is there any way I can assign these permissions through group policy without > giving them full Local Administrator privilege. > > Thanks in advance.. >
- Next message: Roger Abell: "Re: Domain Local group and Require strong. GPO Problem"
- Previous message: Roger Abell: "Re: Erase Password List on windows2000 PC"
- In reply to: -Sari: "SQL Administration without Local Admin privilege"
- Next in thread: -Sari: "Re: SQL Administration without Local Admin privilege"
- Reply: -Sari: "Re: SQL Administration without Local Admin privilege"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
