Home Forums SQL Server 2005 Administering Denying Local Administrators accounts Sysadmin rights ? RE: Denying Local Administrators accounts Sysadmin rights ?

  • Lynn Pettis (2/18/2010)


    First, make sure you have at least two ways to login with sys admin rights. One way is to have a group created and have the DBA's assigned to that group and give that group sys admin rights. The second, have a privileged account for each of the DBA's created and add those to the database with sys admin rights. Once you have that done, you can delete the Builtin\administrator account (group) and this will take away the ability of local admins from getting into SQL Server (unless they add themselves to your DBA group).

    ..until they invoke the DAC.....

    ----------------------------------------------------------------------------------
    Your lack of planning does not constitute an emergency on my part...unless you're my manager...or a director and above...or a really loud-spoken end-user..All right - what was my emergency again?