Removing builtin\administrator on cluster

  • Just wanted to check with some vetrans on removing the builtin/administrator login SQL server on a cluster.

    I understand that the cluster service needs to be there before I can remove this.

    SQLSERVICE and AGENT both run on a separate domain account than the cluster service.

    I also double checked to make sure i can login as SA.

    Am i missing anything?

    Thanks,

    warren

  • As I remember it, you can not remove BUILTIN/Administrators login when you are using clustering.

    -SQLBill

  • A while back I supported several SQL Server clustered instances, and BUILITIN\Administrators was not present. Unfortunately, I did not build those boxes, so I don't know what the work-around is.

       Philip

     

  • You can remove BUILTIN\Administrators but before you do, make sure the SQL Server Service account and the Cluster service account have the ability to login and are members of the sysadmin fixed server role. More here:

    SQL Server Security: Security Admins

    K. Brian Kelley
    @kbriankelley

  • It's fairly easy - but care is required - there are a number of ms articles

    Microsoft Knowledge Base Article - 263712

    don't have the exact link to hand as I save them off to KB.

    [font="Comic Sans MS"]The GrumpyOldDBA[/font]
    www.grumpyolddba.co.uk
    http://sqlblogcasts.com/blogs/grumpyolddba/

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply