I usually create a users role and script out all the permissions from public to users .. then I move into master and msdb and remove permissions. Where users need...
Although I use my own version of log shipping the only real permissions you need are to be able to move the files and call the remote server(s) just do...
This problem exists in sql2k with sp2 or 3 whereby the builtin/admins group ( which I usually disable ) must be enabled for the web assistant to work. Seems no...