Remote Server Login

As a Sys Admin, I was wondering - if I have admin rights to a Win2k machine
that is hosting SQL Server 2000, do I have the ability using any
command-line tools such as OSQL or ISQL (that can be accessed remotely) to
add, delete, or change accounts
registered in SQL Server for the various databases if I don't have access to
a specific account within SQL Server?
I ask, because the question that came up was - what if we have a DBA leave
under less than amicable circumstances? Could I, someone who has admin
rights on the machine, be able to log into that machine remotely and somehow
via command line (I don't maintain active SQL clients centrally), change the
SA password, remove an account, and/or add an account with sysadmin rights,
etc?
Thanks in advance for any help -IF that person continues to have a valid login to SQL Server with
administrative priveleges, then he can do anything via OSQL he can do via
Query Analyzer or SQL Enterprise Manager..
So when someone leaves, we delete their login ( in SQL and/or Windows )
immediately and they can do us no harm..
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"ScottT" <jbell@.vitria.com> wrote in message
news:10ddv86i6ng5e47@.news.supernews.com...
> As a Sys Admin, I was wondering - if I have admin rights to a Win2k
machine
> that is hosting SQL Server 2000, do I have the ability using any
> command-line tools such as OSQL or ISQL (that can be accessed remotely) to
> add, delete, or change accounts
> registered in SQL Server for the various databases if I don't have access
to
> a specific account within SQL Server?
> I ask, because the question that came up was - what if we have a DBA leave
> under less than amicable circumstances? Could I, someone who has admin
> rights on the machine, be able to log into that machine remotely and
somehow
> via command line (I don't maintain active SQL clients centrally), change
the
> SA password, remove an account, and/or add an account with sysadmin
rights,
> etc?
> Thanks in advance for any help -
>