December 4, 2008 at 5:24 am
Hi,
I was wondering if anyone can give me a hint on how to add BUILTIN\Administrators to SQL 2008 logins. This login is not installed by default when I install SQL Server 2008.
Many thanks indeed
Niyala
December 4, 2008 at 5:28 am
why would you want to allow any windows server admin access to sql server as an admin?
-----------------------------------------------------------------------------------------------------------
"Ya can't make an omelette without breaking just a few eggs" 😉
December 4, 2008 at 5:37 am
Thanks.
Because it would be much easier for me than adding individual members manually and, therefore, I wanted to import the Builtin\adminstrators.
Alternatively, I wanted to create a login for a group and then add this group into SQL 2008 login. Is there a means to do so?
Thanks indeed
Niyala
December 4, 2008 at 5:46 am
Niyala (12/4/2008)
Thanks.Because it would be much easier for me than adding individual members manually and, therefore, I wanted to import the Builtin\adminstrators.
Alternatively, I wanted to create a login for a group and then add this group into SQL 2008 login. Is there a means to do so?
Thanks indeed
Niyala
for a user to authenticate via builtin\admins they would have to be an admin on the server, you really dont want this.
yes, create a windows group and put the users into this group. Then add this group as a login to sql server
-----------------------------------------------------------------------------------------------------------
"Ya can't make an omelette without breaking just a few eggs" 😉
December 4, 2008 at 5:54 am
Thanks.
I will try to create a window group and try if it works the way I wanted to do. In spite of this it would be very interesting to know how to add the
BUILTIN\Administrators
I did as follows:
New login | Search | Groups |
Under Advanced, I got a list, among which I could find "Administrators", but could not see anything like BUILTIN\Administrators. Where can I find this?
I appreciate any clue.
Regards
Niyala.
December 4, 2008 at 7:12 am
Ensure you have selected groups in the object types of the user search box, select the domain and just type administrators - it will change to builtin/administrators when you select it.
Most DBAs don't want this group added, it is better to create a new group with only those accounts you want and then add the new group as sysadm
December 4, 2008 at 7:26 am
Many thanks indeed.
Niyala
December 4, 2008 at 8:52 am
I agree, I wouldn't want [BUILTIN\Administrators] in my new SQL Servers either
It's one thing to control AD security, another for SQL
It does prove to be painful at times, sometimes nobody can login into the SQL server if you got locked out 😛
.... which I just did, trying to remove sysadmin and re-add it back to generate script .... gladly I have another domain account
In 2005, it's added by SQL Install by default
In 2008, it is NOT
-- Login: BUILTIN\Administrators
CREATE LOGIN [BUILTIN\Administrators] FROM WINDOWS WITH DEFAULT_DATABASE = [master]
EXEC master..sp_addsrvrolemember @loginame = N'BUILTIN\Administrators', @rolename = N'sysadmin'
GO
December 4, 2008 at 11:35 am
If you do get locked out you can change a registry setting to make it mixed mode authentication but of course you need an 'sa' type of account and password as well.
Viewing 9 posts - 1 through 8 (of 8 total)
You must be logged in to reply to this topic. Login to reply