Home Forums Article Discussions Article Discussions by Author Discuss Content Posted by Kathi Kellenberger Removing the Builtin Administrators - Some Pitfalls to Avoid RE: Removing the Builtin Administrators - Some Pitfalls to Avoid

  • February 22, 2010 at 10:27 am

    #1123120

    ZeeAtl (2/22/2010)

    Kathi,

    A question I have is this about removing BUILTIN\Administrators from Security->Logins on SQL Server [2005] instance.

    If I remove this account from Logins, but the domain users remain as Local\Administrator on the box where SS instance is, are the users able to login the instance and remain a sysadmin? I would assume unless you add their domain users account directly to Logins, then NO, but just wanted to check.

    Thanks,

    Zee - Atlanta

    Accidental DBA

    Zee,

    Only the logins enumerated in the sysadmin server role will have sysadmin access so if Local\Administrator is not listed then you are good to go.

    EXEC sp_helpsrvrolemember 'sysadmin'

    I do have to ask (or rather you should ask yourself) why would "Domain users" need any administrator rights? Especially local.

    John D