April 18, 2006 at 2:07 pm
If a network user has a standard network user account with no elevated credentials but is also the SQL Admin within SQL 2005, can that user somehow change network security settings on drive shares from within the SQL Admin console?
My indications point to yes.
Any help/advise on this matter is very much appreciated.
Thanks, Tony
April 19, 2006 at 7:34 am
Maybe I should clarify.
I'm not trying to find out how to do this for myself. I am the Network Manager where I work and therefor I have access and ability to do anything on my network. I'm trying to find out if there is a way that our SQL Administrator would have been able to do this.
Recently I've noticed some drive security changes where the SQL Admin's name has turned up being the owner of all items in a drive and his account given full access rights with the Domain Users group having been removed entirely.
This guy recently had the SQL Admin responsibilities dropped in his lap. He has no experience as a SQL Admin and not much experience with SQL otherwise. I just don't trust that if he did find a way he could do it that he would not do it.
Can anyone confirm or negate my suspicion about this?
Viewing 2 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply