Deleting BUILTIN\Administrators

  • Due to security reason, I am looking forward to delete this account BUILTIN\Administrators. I referred to some links on the net, for precautions before deleting this account. But getting confused. Please provide your inputs on what steps\precautions to follow before deleting this account. Thanks in advance for your help.

    With regards,

    Moinudheen

    M&M

  • If your Sql Server is running currently under local system account then if you drop builtin the Sql agent service will not start.

    So before dropping it you need to change the Sql Service account from local system to any domain account or to a less privileged account and then drop the builtin\administrator.

    [font="Verdana"]- Deepak[/font]

  • Please advise how to check service account whether it is domain or local in sql2k5. When I right click on

    server->properties->security->Server proxy account->

    I don't see any proxy account but there is password (both of them appear shaded)

    Is there any query we could use.

    Many Thanks,

    Moinudheen

    M&M

  • Before deleting the builtin administrator account make sure you have another account that has administrator rights. Also make sure your SQL Server or SQL Agent services are not runnig under the built in administrator account...

    Basit Ali Farooq
    MCITP Database Administrator
    Microsoft Certified Professional Developer (Web Applications)
    Microsoft Certified Database Administrator
    Microsoft Certified Systems Engineer
    Microsoft Certified Systems Administrator
    CIW Security Analyst
    Cisco Certified Network Associate

  • You can check the Sql Service account in the Sql Server configuration manager. Go to start - run - type 'Sqlservermanager.msc' and hit enter it will open the Sql server configuration manager. You can refer this link to view the same, http://technet.microsoft.com/en-us/library/ms345578.aspx

    The account name should not be local system instead it can be anyother Id like domain account or a less privileged account.

    [font="Verdana"]- Deepak[/font]

  • Deepak, Basit

    Thanks a lot for the invaluable inputs

    Regards,

    Moinudheen

    M&M

  • It is the part of Best practice that you should have to remove the Builtin admin from the SQL server.

    Before deleting Builtin admin from the server, you need to make sure that service a/c in place. Give the SA permission to the svc a/c.

    Now only you could be able to remove the builtin Admin a/c from the server.

    Manoj

    MCP, MCTS (GDBA/EDA)

  • Thanks for all who given such important information..

    Actually, I was thinking to do the same but I was not having such informtion etc..

    Once again thanks for sharing.

    Best Regards

Viewing 8 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic. Login to reply