November 7, 2003 at 12:40 pm
I have a 3 developers that have access to my production sql server 2000 databases. The sql server database is running in mixed mode. The users are not setup to be users inside the SQL Server or the databases. I also have not found them in any windows 2000 server groups.
Does anyone know how these developers are getting access to the database? What could I be missing?
Thanks,
Keith
November 7, 2003 at 12:51 pm
Do you have 'BUILTIN\Administrators' login in your SQL Server? Are they in local administrators group in your server? Check login column of sp_who2 to see what login id they use to access SQL Server?
November 7, 2003 at 1:00 pm
Yes we do have 'BUILTIN\Administrators' in the sql server database but these users are not in the administrator group. I am going to have them login and run the sp_who2 to see what account they are using. This should help narrow down my issue.
Thanks,
Keith
November 7, 2003 at 2:36 pm
They could be in one of domain group which is the member of your local administrator group.
November 11, 2003 at 8:46 am
The user was in another group. I ended up removing database access privileges to find out what group the id was in. Then discovered the group had individual grants on objects. This was how they were able to update the database when they did not have the roles to do so.
Thanks!
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply