December 16, 2005 at 2:46 am
Hi all,
I need to revoke all the permission from guest user in master database.
Thanx in advance
from
Killer
December 16, 2005 at 6:05 am
Then you would need to revoke all permissions from the public role. To do so would leave your SQL Server in an unsupported state as per Microsoft. And there are two objects you absolutely must not revoke permissions from. More info? See my GSEC practical paper:
SQL Server 2000: Permissions on System Tables Granted to Logins Due to the Public Role
K. Brian Kelley
@kbriankelley
December 16, 2005 at 11:29 pm
Hi,
I created a login given permission on a database but this user can access the master database becasue of guest login.
I need to restrict that user not to access the system databases.
from
killer
December 17, 2005 at 7:58 am
The guest user must be left on for master and tempdb. There was a thread a while back where Andy Leonard played around with forcing access off by manually updating the system tables but the result wasn't a good one. There are a couple of objects in master that every user needs to be able to access. You can see those items in Microsoft's OpenHack 4 documentation. I also point out those two objects in my practical.
K. Brian Kelley
@kbriankelley
December 18, 2005 at 8:50 pm
Hi,
If we left the guest user as .Then any user can access the database and can harm it or miss use it.
Is there anyway that user other then Sa cannot see the master database or tey can see but they cant do anything in that. execpt revoking permmission from public for each object sp,exsp
from
killer
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply