October 15, 2002 at 1:09 pm
This was a lab server so no harm done. From a prior seminar I learned that Domain adims have full access to the SQL Server, I knew this but had kind of ignored it. OK so I removed the BUILTIN\Administrators from SQL Logins. But I start getting a number of strange errors. What is the proper method to restrict SQL access to only the DBA types.
Note SQL 7 and 2K, Generally all of SQL runs under the Local System account, but some SQLAgents are moving to a domain account.
KlK, MCSE
KlK
October 15, 2002 at 1:21 pm
Create a domain group for those people with DBA responsiblility and grant system administrator role (sa) in SQL Server to this domain group in logins.
You need also to grant local system account to be System Administrator (sa) in SQL Server if SQL Server is running by the local system account.
Edited by - Allen_Cui on 10/15/2002 1:40:23 PM
October 16, 2002 at 8:26 am
I have a DBA group so I did keep SA access, but how to I give the Local System Account SA priveleges I don't find it as a user.
But I think that is the problem.
KlK, MCSE
KlK
October 16, 2002 at 9:33 am
Run sp_grantlogin 'NT Authority\System' and then grant 'sa' right. It is case-sensitive.
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply