river1 (2/1/2010)
Ok, thank you very much Master.I will trie to know more about that too, and if i discover something i will talk to you.
tks,
Pedro
This is what MS suggested below. You MUST have the agent account as sys admin role...
Main concern in removing BUILTIN\Administrators login
--------------------
-If you're in Windows Authentication mode only, the biggest danger in removing the BUILTIN\Administrators login is that you do not insure that there is another Windows account already in existance that has sysadmin role on the SQL Server, or fail to create a new login for a Windows account that has sysadmin role before logging out. If you remove BUILTIN\Administrators login and fail to have another login with sysadmin role, you will no longer be able to administrate your SQL Server.
-If you are in mixed mode and have the sa account enabled, then you will still be able to administrate the SQL server (add/remove logins, etc) under the sa login. You must verify that you can login as the sa account prior to removal of the BUILTIN\Administrators login.
Other considerations
--------------------
-You must add a login account on SQL Server for the domain user account that the SQL Server Agent service is running under. The login account should be added to the sysadmin fixed server role.
-If Full-Text is enabled, add a login account for the Local System account using sp_grantlogin [NT Authority\System] and ensure that the login account is a member of the sysadmin fixed server role. This also applies if you are running the SQL Services as Local System
For cluster:
-Cluster administrator is a member of Administrators group. If this account (the Cluster service LogOnAs account) is not specifically added in SQL Server as a login, then the cluster administrator is not able to communicate with SQL Server and the SQL Services will not start. http://support.microsoft.com/?id=291255
Microsoft does recommend that you remove the BUILTIN\Administrators login.