September 24, 2003 at 3:05 pm
My DBA team just discovered that as long as developers have EM loaded to their desktops they can stop/start the SQL service regardless of permissions. I know BOL says these folks have to be a member of a sys admin role. But our tests proves otherwise. We are looking for ways to 'fix' this. Does anyone have any ideas on how to lock this down?
Aurora
September 24, 2003 at 5:09 pm
I think they can also be server admins to stop. Of course, if your DBAs are admins on the box or domain admins, they can do this as well. The service stop is a Windows as well as a SQL function.
Steve Jones
http://www.sqlservercentral.com/columnists/sjones
The Best of SQL Server Central.com 2002 - http://www.sqlservercentral.com/bestof/
Viewing 2 posts - 1 through 1 (of 1 total)
You must be logged in to reply to this topic. Login to reply