Deleting BUILTIN\Administrators

Question

Deleting BUILTIN\Administrators

M&M

SSC-Insane

Points: 21700
More actions
May 27, 2008 at 2:21 am

#125515

Due to security reason, I am looking forward to delete this account BUILTIN\Administrators. I referred to some links on the net, for precautions before deleting this account. But getting confused. Please provide your inputs on what steps\precautions to follow before deleting this account. Thanks in advance for your help.
With regards,
Moinudheen
M&M

Viewing 8 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic. Login to reply

Deepak-405225 SSCertifiable Points: 6120 More actions · Answer 1

If your Sql Server is running currently under local system account then if you drop builtin the Sql agent service will not start.

So before dropping it you need to change the Sql Service account from local system to any domain account or to a less privileged account and then drop the builtin\administrator.

[font="Verdana"]- Deepak[/font]

M&M SSC-Insane Points: 21700 More actions · Answer 2

Please advise how to check service account whether it is domain or local in sql2k5. When I right click on

server->properties->security->Server proxy account->

I don't see any proxy account but there is password (both of them appear shaded)

Is there any query we could use.

Many Thanks,

Moinudheen

M&M

alimcitp SSC Eights! Points: 930 More actions · Answer 3

Before deleting the builtin administrator account make sure you have another account that has administrator rights. Also make sure your SQL Server or SQL Agent services are not runnig under the built in administrator account...

Basit Ali Farooq
MCITP Database Administrator
Microsoft Certified Professional Developer (Web Applications)
Microsoft Certified Database Administrator
Microsoft Certified Systems Engineer
Microsoft Certified Systems Administrator
CIW Security Analyst
Cisco Certified Network Associate

Deepak-405225 SSCertifiable Points: 6120 More actions · Answer 4

You can check the Sql Service account in the Sql Server configuration manager. Go to start - run - type 'Sqlservermanager.msc' and hit enter it will open the Sql server configuration manager. You can refer this link to view the same, http://technet.microsoft.com/en-us/library/ms345578.aspx

The account name should not be local system instead it can be anyother Id like domain account or a less privileged account.

[font="Verdana"]- Deepak[/font]

M&M SSC-Insane Points: 21700 More actions · Answer 5

Deepak, Basit

Thanks a lot for the invaluable inputs

Regards,

Moinudheen

M&M

Manoj-485464 SSCrazy Points: 2717 More actions · Answer 6

It is the part of Best practice that you should have to remove the Builtin admin from the SQL server.

Before deleting Builtin admin from the server, you need to make sure that service a/c in place. Give the SA permission to the svc a/c.

Now only you could be able to remove the builtin Admin a/c from the server.

Manoj

MCP, MCTS (GDBA/EDA)

Muhammed Sajid Hussain SSC Veteran Points: 290 More actions · Answer 7

Thanks for all who given such important information..

Actually, I was thinking to do the same but I was not having such informtion etc..

Once again thanks for sharing.

Best Regards