Post reply

DDL Trigger for Preventing Sysadmin roles.

  • April 3, 2016 at 8:43 am

    #306099

    Hi All,

    Can some one provide DDL Trigger script to Prevent Sysadmin Roles.

    Regards,

    Shenkar Gade

  • April 3, 2016 at 10:13 am

    #1869376

    What, specifically, do you want? A trigger to prevent any logins being given the sysadmin role? To prevent any roles being created with the CONTROL SERVER permission (equivalent to sysadmin)? To prevent any login being granted the CONTROL SERVER permission?

    And keep in mind that anyone with enough rights to do any of those likely has enough rights to disable the trigger.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass

  • April 3, 2016 at 7:15 pm

    #1869393

    Exactly... No sysadmin should not grant sysadmin privileges.. A trigger should be prevent while granting sysadmin roles. Iam searching for evevtdata to sent notification like to whom who is trying to grant permissins..

    Thanks,

    Shenkar

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply