Home Forums SQL Server 2008 Security (SS2K8) Best way to completely keep an entire Active Directory group of people out of a SQL Server RE: Best way to completely keep an entire Active Directory group of people out of a SQL Server

  • If it is general blocking a set of users then a logon trigger will do the trick.

    But if you want to block Server Admins & Developers with Server Admin rights then it gets more tricky as they can always start sql with single user mode and minimal configuration which will prevent the login triggers from running.