Post reply

Administrative rights on the 2000 Server

  • March 26, 2003 at 1:08 pm

    #58947

    Hi,

    Can anyone point me in the direction of finding a white paper or something official, ASAP. My NT/2000 Admin is wanting to take away all Administrator rights to servers because he thinks that having sysadmin on the SQL Server is enough to administer SQL2000. Is he right? I was under the assumption that if you needed to run a service pack, ect...you would need administrator rights on the actual box as well as the sql server itself.

    Thanks for a quick reply.

  • March 26, 2003 at 5:44 pm

    #452271

    You might need admin rights for service packs or other installations, but that shouldn't be a big deal. Have the admin there.

    You don't need admin rights on the machine to administer SQL Server.

    Steve Jones

    sjones@sqlservercentral.com

    http://www.sqlservercentral.com/columnists/sjones

    http://www.dkranch.net

  • March 27, 2003 at 1:32 am

    #452289

    Remember to remove the BUILTIN\Administrators account from SQL Server to get back at your admin so he can't access you SQL Server.

    Seriously though, agree with Steve in that you don't need have admin access to the box to administer SQL, but your admin will have to help you install service packs. If he wants that work then sure. Why doesn't he want you to be local admin of that box? Is it running anything else that he doesn't want you to be able to access?

    --

    Chris Hedgate @ Apptus Technologies (http://www.apptus.se)

    http://www.sql.nu

    --
    Chris Hedgate http://www.hedgate.net/
    Contributor to the Best of SQL Server Central volumes
    Articles: http://www.sqlservercentral.com/columnists/chedgate/

  • March 27, 2003 at 1:04 pm

    #452387

    Is this the same for SQL 7.0 and SQL 6.5 as well, that we don't need to be the local admin on the BOX?! Some time back, I did deny access to BUILTIN\Administators for all the databases. But the maintenance jobs, keeps failing.

    Any one have any idea, why this is happening?! I have checked teh "RUN AS" option in the job. This field is having "sa".

    Please Help!!!

    .

  • March 27, 2003 at 1:19 pm

    #452388

    Are you running SQL Server and Agent services with local system account? If you are, you can't simply deny 'BUILTIN\Administators' account. You have to grant 'NT Authority\System' account to access SQL Server with 'sa' right.

    Or you could change the service account to a domian user account with proper NT privileges and grant it to access SQL Server with 'sa' right too.

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply