September 23, 2010 at 8:14 am
We are trying to standardise access to SQL Server in our oraganisation.
We are installing SQL Server Management Studio locally for all our developers and DBA's.
The DBA login in sql server has been given the 'sysadmin' role. The DBA domain account has been made a member of the following Windows Groups,
- Remote Desktop Users
- Users
Our developers have been given the appropriate database role. Their domain admin account has been made a member of the following Windows Groups,
- Users
Can you advise whether this is a correct setup, if not can you suggest an alternative ?
Do we need to put Developers in the 'Users' group ?
Thanks
September 28, 2010 at 12:35 pm
It sounds like a good setup to me. Except, the RemoteDesktop item. I'm not sure why you'd need the DBA Group Login to have that.
Will the DBAs be required to do any instance maintenance that requires access to the actual server? If so, consider making them members of the server's administrators group. But ONLY if your DBA team is a one-stop-shop sort of group. If they don't do that sort of work, don't give them access.
Still not sure about the RemoteDesktop membership, though. What does that do for you?
Viewing 2 posts - 1 through 1 (of 1 total)
You must be logged in to reply to this topic. Login to reply