locking down public and guest accounts

  • dmaniac-409139

    SSC Rookie

    Points: 41

    I'm trying to COMPLETELY!! lock down the guest & public accounts so that when I create a new user (without any privledges what so ever) that new user can't access anything.  The problem I see is that no matter what I do, the new user can still access certain system tables in the master database.  I don't want anyone having access to the master database what so ever.

    Here is what I did to lock down both accounts.  I denied all from both the guest and puclic accounts, then revoke connect from the guest account, then I disabled the guest account in the computer management console in administrative tools.

    Am I doing something wrong? 

    < ?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />

    EXEC

    sp_MSforeachdb 'use [?] deny all from guest'

    EXEC

    sp_MSforeachdb 'use [?] deny all from public'

    EXEC

    sp_MSforeachdb

    'use [?] if db_id() not between 1 and 2 begin REVOKE CONNECT FROM GUEST end'

  • Rudyx - the Doctor

    SSC-Forever

    Points: 43696

    Please do not double post: http://www.sqlservercentral.com/forums/shwmessage.aspx?forumid=338&messageid=346136

    RegardsRudy KomacsarSenior Database Administrator"Ave Caesar! - Morituri te salutamus."

Viewing 2 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply