Post reply

builtin administrators and users

  • May 23, 2006 at 5:06 am

    #117728

    hi everyone,

    I am searching for Builtin\administrators and builtin\users which appear at Login section in sql server express

    could anyone give me a link or explain what are this? I really looked very hard without any succes

    thanks ,

    Daniela

  • May 23, 2006 at 5:21 am

    #639455

    for example http://www.microsoft.com/technet/prodtechnol/sql/2000/maintain/sqlops3.mspx

    "The SQL Server 2000 BUILTIN\Administrators login account maps to the local Administrators group on the local computer where SQL Server 2000 is installed. The local Administrators group includes the Domain Administrators group. The BUILTIN\Administrators group is by default a member of the sysadmin fixed server role, to which the sa login account maps in SQL Server 2000. Thus, anyone who is a Domain Administrator or a local Administrator will automatically be a member of the sysadmin fixed server role for that SQL Server installation and possibly other installations. The DBA can resolve this by removing the BUILTIN\Administrators account from the sysadmin fixed server role. This practice is recommended by Microsoft."

  • May 23, 2006 at 5:29 am

    #639458

    Do you know if it is a way to disable the access to a single database, to anyone except sql users?

    Daniela

  • May 23, 2006 at 6:36 am

    #639477

    Of course. You can remove Builtin/Administrators, but be carefull

    The same article:

    "

    Note: The BUILTIN\Administrators account can be removed from a server only if a login account on the SQL Server is created for the domain user account that the SQL Sever Agent service is running under. The login account should be added to the sysadmin fixed server role. For clustering scenarios, also create a SQL Server login account for the domain user account that the Microsoft Clustering Service is running under. Also add this login account to the sysadmin fixed server role. If Full-Text is enabled, add a login account for the Local System account using sp_grantlogin [NT Authority\System] and ensure that the login account is a member of the sysadmin fixed server role.

    "

  • May 23, 2006 at 7:54 am

    #639504

    Thanks, it is really cool. It worked

    Daniela

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply