I would never ever grant permissions to public, set up a few groups like READ_ONLY READ_WRITE and app or what ever else you want, any table proc and so on...
Hi there The NT administrators should be able to create you an admin group on your servers whereby you have local admin rights but you cannot see things like users....