locking down public and guest accounts

• dmaniac-409139

  Valued Member

  Points: 71

  More actions

  February 20, 2007 at 12:25 pm

  #194339

  I'm trying to COMPLETELY!! lock down the guest & public accounts so that when I create a new user (without any privledges what so ever) that new user can't access anything.  The problem I see is that no matter what I do, the new user can still access certain system tables in the master database.  I don't want anyone having access to the master database what so ever.

  Here is what I did to lock down both accounts.  I denied all from both the guest and puclic accounts, then revoke connect from the guest account, then I disabled the guest account in the computer management console in administrative tools.

  Am I doing something wrong? 

  EXEC

  sp_MSforeachdb 'use [?] deny all from guest'

  EXEC

  sp_MSforeachdb 'use [?] deny all from public'

  EXEC

  sp_MSforeachdb

  'use [?] if db_id() not between 1 and 2 begin REVOKE CONNECT FROM GUEST end'

• Rudyx - the Doctor

  SSC-Forever

  Points: 43695

  More actions

  February 21, 2007 at 12:14 pm

  #691000

  Please do not double post: http://www.sqlservercentral.com/forums/shwmessage.aspx?forumid=338&messageid=346136

  RegardsRudy KomacsarSenior Database Administrator"Ave Caesar! - Morituri te salutamus."