Wednesday, March 28, 2012

Remove domain admins access to SQL 2005 DBs

Hello,
Could you please advise how can I remove domain admins' access to SQL
databases on SQL Server 2005? Is there any only SQL Authentication mode ?OzzY
There is BUILTIN\Administrators group undfer Security folder. You can deny
access to database engine for this group
"OzzY" <apexgore@.yahoo.com> wrote in message
news:uKGdYUt1HHA.3400@.TK2MSFTNGP03.phx.gbl...
> Hello,
> Could you please advise how can I remove domain admins' access to SQL
> databases on SQL Server 2005? Is there any only SQL Authentication mode ?
>|||Before removing the BUILTIN\Administrators, make sure you
have another account that is a sysadmin that you can use to
get into SQL Server.
There isn't a SQL Authentication only mode - mostly because
Windows authentication is more secure. But you can remove
the BUILTIN\Administrators group. That is how the domain
admins inherit access to SQL Server - the
BUILTIN\Administrators group is the local admins group on
the box. Domain admins are members of the local admins group
on the box. And that's how they get access - all through
windows group membership and the BUILTIN\Administrators or
local admins group being setup as sysadmins on SQL Server.
-Sue
On Sat, 4 Aug 2007 23:21:50 +0300, "OzzY"
<apexgore@.yahoo.com> wrote:

>Hello,
>Could you please advise how can I remove domain admins' access to SQL
>databases on SQL Server 2005? Is there any only SQL Authentication mode ?
>

No comments:

Post a Comment