Remove BUILTIN\Administrators from SQL 2005

We have a server shared by two project teams. To tight the security, I want to remove BUILTIN\Administrators off the public and sysadmin server roles. My question: any thing I should pay special attention ? I use LocalSystem to start all SQL Service. I know this is not a very good pratice yet I have no choice as our company network is a mixed of windows and novell, we do not have AD.

Make sure that you have a sysadmin left after removing builtin\administrators. I have seen sql servers in integrated mode where someone removed builtin\administrators and then nobody could administer the server.

Local System is very powerful. Any code executed by SQL Server can change anything on the windows box so if you are running untrusted code inside SQL Server you need to be aware of that fact and the potential threat it represents.

to remove builtin\administraotrs

exec sp_dropsrvrolemember [BUILTIN\Administrators] , sysadmin

go

drop login [BUILTIN\Administrators]

go

hth,

-Steven Gott

S/DET

SQL Server

|||

Hi,

What about NT AUTHORITY\System account?

Is it needed?

Regards,

Jeremy

|||

Some management tools may be using it (for example MOM).

-Raul Garcia

SDE/T

SQL Server Engine

Remove BUILTIN\Administrators from SQL 2005

We have a server shared by two project teams. To tight the security, I want to remove BUILTIN\Administrators off the public and sysadmin server roles. My question: any thing I should pay special attention ? I use LocalSystem to start all SQL Service. I know this is not a very good pratice yet I have no choice as our company network is a mixed of windows and novell, we do not have AD.

Make sure that you have a sysadmin left after removing builtin\administrators. I have seen sql servers in integrated mode where someone removed builtin\administrators and then nobody could administer the server.

Local System is very powerful. Any code executed by SQL Server can change anything on the windows box so if you are running untrusted code inside SQL Server you need to be aware of that fact and the potential threat it represents.

to remove builtin\administraotrs

exec sp_dropsrvrolemember [BUILTIN\Administrators] , sysadmin

go

drop login [BUILTIN\Administrators]

go

hth,

-Steven Gott

S/DET

SQL Server

|||

Hi,

What about NT AUTHORITY\System account?

Is it needed?

Regards,

Jeremy

|||

Some management tools may be using it (for example MOM).

-Raul Garcia

SDE/T

SQL Server Engine

Remote server connection

We have a database on a shared SQL Server stored on our ISP's server. I can
connect to this via Enterprise Manager from our office, but when I try the
same from Enterprise Manager on my PC at home I get the following message:

A connection could not be established to MFSERVER.

Reason: SQL Server is not running or access denied.

Any ideas?

ThanksHi

There is probably a firewall blocking port 1433.
Check with your network administrators.

Regards
----------
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland

IM: mike@.epprecht.net

MVP Program: http://www.microsoft.com/mvp

Blog: http://www.msmvps.com/epprecht/

"Mark Fisher" <mfisher@.uku.co.uk> wrote in message
news:%wGud.1214$uv1.177@.newsfe1-gui.ntli.net...
> We have a database on a shared SQL Server stored on our ISP's server. I
can
> connect to this via Enterprise Manager from our office, but when I try the
> same from Enterprise Manager on my PC at home I get the following message:
> A connection could not be established to MFSERVER.
> Reason: SQL Server is not running or access denied.
> Any ideas?
> Thanks

Remote MS Sql Server

Hi collegues,
I've to managing some "sqlserver server" on shared hosting on CrystalTech
structure.
Now I use "enterprise manager 2000" but it's very slow in every operations
also If I've a 1Mbit DSL, and I see all db in every server, not only mine
db.
Are there some other tools to manage remotly sql server, more fast?
Thanks
Merlinox (Italy)
http://merlinox.splinder.it
http://www.merlinox.tk (per l'Aido)
Merlinox (Italy)
http://merlinox.splinder.it
http://www.merlinox.tk (per l'Aido)
> Are there some other tools to manage remotly sql server, more fast?
Query Analyzer
|||But to use query analyzer I've to manage all with T-SQL.
There aren't visual tools.
Right?
On Tue, 27 Apr 2004 17:20:29 +0300, Bojidar Alexandrov
<bojo_do_not_spam@.kodar.net> wrote:

> Query Analyzer
>
Merlinox (Italy)
http://merlinox.splinder.it
http://www.merlinox.tk (per l'Aido)
|||Merlinox typed:

> Are there some other tools to manage remotly sql server, more fast?
Have a look to myLittleAdmin For MS SQL
More info on http://www.myLittleTools.net/mla_sql
Live demo on http://www.myLittleTools.net/livedemo/mla_sql
More products available on
http://www.microsoft.com/sql/msde/partners/default.asp
Best regards
Elian Chrebor
// myLittleTools.net : leading provider of web-based applications.
// myLittleAdmin : online MS SQL manager
// http://www.mylittletools.net
// webmaster@.mylittletools.net
|||Do you tested it?
I see may download lite version.
Can't testing full version?
On Tue, 27 Apr 2004 16:33:08 +0200, el.c. - myLittleTools.net
<NOwebmasterSPAM@.mylittletools.net> wrote:

> Merlinox typed:
>
> Have a look to myLittleAdmin For MS SQL
> More info on http://www.myLittleTools.net/mla_sql
> Live demo on http://www.myLittleTools.net/livedemo/mla_sql
> More products available on
> http://www.microsoft.com/sql/msde/partners/default.asp
> Best regards
> Elian Chrebor
>
> --
> // myLittleTools.net : leading provider of web-based applications.
> // myLittleAdmin : online MS SQL manager
> // http://www.mylittletools.net
> // webmaster@.mylittletools.net
>
Merlinox (Italy)
http://merlinox.splinder.it
http://www.merlinox.tk (per l'Aido)
|||You can try SQLExecMS,
It is designed to be fast. Full version is available for download.
JS
"Merlinox" <merlinox@.dontspamhotmail.com> wrote in message
news:opr64b6au8zpbug4@.msnews.microsoft.com...
> Hi collegues,
> I've to managing some "sqlserver server" on shared hosting on CrystalTech
> structure.
> Now I use "enterprise manager 2000" but it's very slow in every operations
> also If I've a 1Mbit DSL, and I see all db in every server, not only mine
> db.
> Are there some other tools to manage remotly sql server, more fast?
> Thanks
> --
> Merlinox (Italy)
> http://merlinox.splinder.it
> http://www.merlinox.tk (per l'Aido)
> --
> Merlinox (Italy)
> http://merlinox.splinder.it
> http://www.merlinox.tk (per l'Aido)
|||Thank you John.
Just I 've 2 minutes I'll try it.
I hope is this:
http://www.laplas-soft.com/
On Tue, 27 Apr 2004 20:23:26 -0400, John Smith <wp456@.mail.ru> wrote:

> You can try SQLExecMS,
> It is designed to be fast. Full version is available for download.
> JS
>
> "Merlinox" <merlinox@.dontspamhotmail.com> wrote in message
> news:opr64b6au8zpbug4@.msnews.microsoft.com...
>
Merlinox (Italy)
http://merlinox.splinder.it
http://www.merlinox.tk (per l'Aido)
|||I try it.
It seems very fast, but there aren't any wizard to create objects.
It's like query analyzer.
And so, it isn't free.
Thank you
On Tue, 27 Apr 2004 20:23:26 -0400, John Smith <wp456@.mail.ru> wrote:

> You can try SQLExecMS,
> It is designed to be fast. Full version is available for download.
> JS
>
> "Merlinox" <merlinox@.dontspamhotmail.com> wrote in message
> news:opr64b6au8zpbug4@.msnews.microsoft.com...
>
Merlinox (Italy)
http://merlinox.splinder.it
http://www.merlinox.tk (per l'Aido)
|||Merlinox typed:
> Do you tested it?
> I see may download lite version.
> Can't testing full version?
The full version can be tested online in the live demo section.
Best regards
Elian Chrebor
// myLittleTools.net : leading provider of web-based applications.
// myLittleAdmin : online MS SQL manager
// http://www.mylittletools.net
// webmaster@.mylittletools.net