Built-in Administrators

• aby_dvd

  Ten Centuries

  Points: 1310

  More actions

  July 1, 2011 at 3:51 am

  #252938

  Is it recommended to remove Built-in Administrators from the sql group ?

  Pros/Cons pls

  Thanks

• Ant-Green

  SSC Guru

  Points: 113507

  More actions

  July 1, 2011 at 5:41 am

  #1346957

  it all depends how you want to manage security I guess.

  we disable it as you may have domain admins who are not dba's, who will get SA access if bultin\administrators is not disabled.

  we have a very tight nit security policy where there is only one account which has SA rights across the whole board.

  we as DBA's only have limited access with our windows accounts, should we need to do anything admin related we login as the account with SA access.

• Syed Jahanzaib Bin hassan

  SSChampion

  Points: 11410

  More actions

  July 1, 2011 at 5:42 am

  #1346958

  Recommended to remove the SysAdmin Role on these type of users in the case of SQL Server mode + Windows Authtication option is enabled

  Regards,
  Syed Jahanzaib Bin Hassan
  BSCS | MCTS | MCITP | OCA | OCP | OCE | SCJP | IBMCDBA

  My Blog
  www.aureus-salah.com