April 8, 2021 at 1:27 pm
A vendor installed SQL 2017 Express on a new server. I am in the Windows Administrator group, but do not have access to anything useful in SQL, when I RDP onto the Server..
Computer_Management -> Groups -> Administrators -> DomainName\MyName
What are some reasons I would not have access ?
April 8, 2021 at 3:32 pm
Simple - by default when SQL Server is installed (all Editions) only those members added during the install are granted sysadmin rights to the SQL instance. Unless someone with permissions adds your account to SQL and grants permission you will not have access.
Jeffrey Williams
“We are all faced with a series of great opportunities brilliantly disguised as impossible situations.”
― Charles R. Swindoll
How to post questions to get better answers faster
Managing Transaction Logs
April 8, 2021 at 5:08 pm
Is that new ?
So a Domain Admin can't grant SQL Admin access to another Windows Admin account, if the Domain Admin has not specifically been given SQL Admin permission at install time, or from an existing SQL Admin ?
April 8, 2021 at 5:24 pm
Is that new ?
So a Domain Admin can't grant SQL Admin access to another Windows Admin account, if the Domain Admin has not specifically been given SQL Admin permission at install time, or from an existing SQL Admin ?
Nope, it's old, and by design. I, personally, don't want my Domain Administrators having access to my SQL Server's (especially with sysadmin privileges!!!) so I'm pleased it doesn't automatically grant them access as well.
If I did want my Domain Adminstrators to have access to the instance, I would create them, or their AD group, the needed LOGIN and USER objects with the minimal amount of permissions they need; which would certainly not be sysadmin.
Thom~
Excuse my typos and sometimes awful grammar. My fingers work faster than my brain does.
Larnu.uk
April 8, 2021 at 5:31 pm
I have been away from SQL for a bit...getting rusty !
April 13, 2021 at 5:45 am
That changed with SQL Server 2008 - it does not automatically add “Built-In\Administrators” as SQL Server SysAdmins during the SQL Server installation. Here is more detail, plus a brief discussion why that is.
https://www.sqlnethub.com/blog/should-windows-built-in-administrators-be-sql-server-sysadmins/
Viewing 7 posts - 1 through 6 (of 6 total)
You must be logged in to reply to this topic. Login to reply