April 26, 2007 at 7:18 am
Hello,
In MSSQL 2000, it was recommended to drop the BUILTIN\Administrators account. In MSSQL 2005, I see the option "ENABLE/DISABLE". Is it better to delete or disable this account? Any pros or cons?
Many thanks. Jeff
April 26, 2007 at 7:40 am
If you drop the account you know that it's gone and no need to worry about it. Unless the account needs to be able to login again and they had some not so common or easily congirable access to dbs. On the other hand if the account has not so common access I prefer to disable it especially I have feeling that they may have to do some work in the future and I need to give them access, in this case it's just easy to enable it. I personally drop the builtin\administirators since some of them just check every available box. As a dba we don't administrator windows server my approach is it's my job to administor sql server so I drop the built in admnistrator account. I admit that it's also their skills and knowledge about sql server. I was fortunate to have a really good admin to fix an issue for me while as a single dba who I as on a vacation.
Good day,
Bulent
April 27, 2007 at 7:53 am
Remember that you need this account for clustering as without your clustering service cannot start your sql service
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply