October 6, 2010 at 12:49 pm
If a user is admintrator on the SQl server machine does the user have default sysadmin access to the SQl server? if so, is there a way to restrict computer admin to sql server?
October 6, 2010 at 12:51 pm
By default, in sql 2005, the builtin\administrators group (local windows admins) have sysadmin access to the sql server.
If you want to remove that and add users manually, remove the builtin\administrators group from the login list (or remove sysadmin from its server roles).
October 6, 2010 at 12:59 pm
Sorry I am not clear with this, if i am adding a user to Administrators group on windows do you mean that user will not have sysadmin access on sql server.
October 6, 2010 at 1:01 pm
Tara-1044200 (10/6/2010)
Sorry I am not clear with this, if i am adding a user to Administrators group on windows do you mean that user will not have sysadmin access on sql server.
If you're running SQL 2005 (which I assume you are), and have not changed the builtin\administrators permission on the sql server, then yes, any local windows admins will also have sysadmin to the SQL instance.
October 6, 2010 at 1:12 pm
Does that mean If a user is not in Built in admin group and but in local admin group that user can not have access to SQL Server?
October 6, 2010 at 1:14 pm
Ohh ok I got it.
I have to remove built in group in SQL Server to restrict users in the administrator group to prohibit from sql server, right?
October 6, 2010 at 1:16 pm
Tara-1044200 (10/6/2010)
Ohh ok I got it.I have to remove built in group in SQL Server to restrict users in the administrator group to prohibit from sql server, right?
Correct
Actually in Sql 2008+, the builtin\administrators group does not have sysadmin by default.
Viewing 7 posts - 1 through 7 (of 7 total)
You must be logged in to reply to this topic. Login to reply