2012年3月7日星期三

Disallow administrator access

Can anyone tell me how I can stop a domain administrator from accessing
SQL Server 2000 on Windows 2003 Server.
ToddRemove the builtin\Administrators from the Security - login in SQL server.
Regards
Jonas
"Todd Hazer" <NO_SPAMthazer@.gmail.com> wrote in message
news:%231Tl8k6uEHA.2876@.TK2MSFTNGP12.phx.gbl...
> Can anyone tell me how I can stop a domain administrator from accessing
> SQL Server 2000 on Windows 2003 Server.
> Todd|||Will setting the builtin\Administrators security access to 'Deny' work?
thanks for the reply.
Todd
Jonas Larsen wrote:
> Remove the builtin\Administrators from the Security - login in SQL server.
> Regards
> Jonas
> "Todd Hazer" <NO_SPAMthazer@.gmail.com> wrote in message
> news:%231Tl8k6uEHA.2876@.TK2MSFTNGP12.phx.gbl...
>
>
>|||I have added my domain user account to the security logins and set
myself up as a system administrator. My domain user account is in the
domain Administrators group and in the Domain Admins group.
I just set the SQL Server builtin\Administrators security access setting
to "Deny" and it stopped me from connecting as well. How can I disallow
one administrator without denying myself?
Todd
Jonas Larsen wrote:
> Remove the builtin\Administrators from the Security - login in SQL server.
> Regards
> Jonas
> "Todd Hazer" <NO_SPAMthazer@.gmail.com> wrote in message
> news:%231Tl8k6uEHA.2876@.TK2MSFTNGP12.phx.gbl...
>
>
>|||Remove the builtin\Administrators from the SQL Server instead of deny. And
the add you own domain account as system admin in SQL.
Jonas
"Todd Hazer" <NO_SPAMthazer@.gmail.com> wrote in message
news:%23JM86O7uEHA.3276@.TK2MSFTNGP15.phx.gbl...[vbcol=seagreen]
> I have added my domain user account to the security logins and set
> myself up as a system administrator. My domain user account is in the
> domain Administrators group and in the Domain Admins group.
> I just set the SQL Server builtin\Administrators security access setting
> to "Deny" and it stopped me from connecting as well. How can I disallow
> one administrator without denying myself?
> Todd
> Jonas Larsen wrote:
server.[vbcol=seagreen]|||You can remove the builtin\administrators group from SQL
Server but that can sometimes introduce other problems.
Whether you get problems or not depends. The following
article has more information on removing the
builtin\administrators group as well as a section with links
to some issues that could come up:
INF: How to impede Windows NT administrators from
administering a clustered instance of SQL Server
http://support.microsoft.com/?id=263712
-Sue
On Tue, 26 Oct 2004 15:18:08 -0700, Todd Hazer
<NO_SPAMthazer@.gmail.com> wrote:

>Can anyone tell me how I can stop a domain administrator from accessing
>SQL Server 2000 on Windows 2003 Server.
>Todd

没有评论:

发表评论