April 28, 2003 at 10:15 am
I read somewhere but can any verify and show me links with issues with removing the 'local\admin' group from SQL Server security? thanks..
April 28, 2003 at 6:06 pm
Be aware removing 'BUILTIN\Administrators' login from SQL Server might cause problems such as cluster SQL Server and full text service. See KBs below for issues and solutions.
http://support.microsoft.com/default.aspx?scid=kb;en-us;263712
http://support.microsoft.com/default.aspx?scid=kb;en-us;295034
http://support.microsoft.com/default.aspx?scid=kb;en-us;317746
April 29, 2003 at 6:47 am
Also make sure you have the appropriate accounts specified as sysadmin fixed server role members before dropping BUILTIN\Administrators. Last thing you want to do is drop that group and then realize you don't have access back into SQL Server.
K. Brian Kelley
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server Performance Monitoring
http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1
K. Brian Kelley
@kbriankelley
April 29, 2003 at 9:19 am
thanks for the input and links..
April 29, 2003 at 9:25 am
thanks for the input and links..
April 29, 2003 at 9:34 am
If you want to stop people logging in and gaining admin rights through the BUILTIN\Administrators, you can remove the login from the Sysadmin server role.
Clive Strong
April 29, 2003 at 9:46 am
I hate this. IMHO, it's more of a pain, especially when you are on vacation or need some remote hands. Just my experience, but I tend to allow local admins the access right, but track changes pretty tightly. If someone makes a change without asking permission or being aware of their actions, we handle it face to face, in an administrative fashion, i.e. I scream at them.
Steve Jones
April 29, 2003 at 9:57 am
I tend not to remove the group neither, just that these servers are shipped to South America countries and I really don't want those network guys down there having authentication into SQL. I created a domain account that has 'local admin' rite and sys admin to start the services and use that account to maintain the servers. I read and had some knowledge with issues of removing this group but I just some more insights from all the experts.. 🙂
Viewing 8 posts - 1 through 7 (of 7 total)
You must be logged in to reply to this topic. Login to reply