|
|
|
Ten Centuries
      
Group: General Forum Members
Last Login: Wednesday, May 08, 2013 1:33 AM
Points: 1,186,
Visits: 1,852
|
|
Thanx to those who has answered,
Ok Can u just help to prevent windows authentication or windows users disable on the cluster , from AD or from Local windows server Group from anywhere???
Thanks
|
|
|
|
|
Ten Centuries
      
Group: General Forum Members
Last Login: Thursday, March 21, 2013 8:40 AM
Points: 1,099,
Visits: 1,320
|
|
Huh?
Please re-phrase your question as it made no sence.
Adam Zacks
-------------------------------------------
Be Nice, Or Leave
|
|
|
|
|
SSCommitted
      
Group: General Forum Members
Last Login: Monday, May 13, 2013 3:46 PM
Points: 1,541,
Visits: 832
|
|
The account under which the SQL Server service is running on a cluster must be a domain (Windows) account and that account needs SysAdmin rights within SQL Server.
The account under which the Cluster service is running must also be a domain account and must be able to connect to the server. It does not need any specific rights except the public role against the master database (or maybe whatever it's default database is, although I've never tried changing that).
These accounts must be domain accounts. You can tie them down fairly well by using a Windows policy to prevent them being able to log on locally.
Once you've got these accounts set up you can drop all other domain/local Windows accounts if you really want to: the first one we drop is BUILTIN/Administrators.
Note that using Windows authentication is the recommended model in every best practice article I can remember reading, and that is especially so in pre-SQL2k8 versions where the password management of SQL Server accounts is almost impossible to force into regulatory-compliant policies except through external controls.
As the other responders have said, you should be absolutely certain what it is that you're trying to achieve before making any changes, and test them elsewhere before implementing them on your production system.
|
|
|
|
|
Ten Centuries
      
Group: General Forum Members
Last Login: Wednesday, May 08, 2013 1:33 AM
Points: 1,186,
Visits: 1,852
|
|
OK on suggestion of all u I will not do any thing...
Thanks
|
|
|
|