I'm trying to COMPLETELY!! lock down the guest & public accounts so that when I create a new user (without any privledges what so ever) that new user can't access anything. The problem I see is that no matter what I do, the new user can still access certain system tables in the master database. I don't want anyone having access to the master database what so ever.
Here is what I did to lock down both accounts. I denied all from both the guest and puclic accounts, then revoke connect from the guest account, then I disabled the guest account in the computer management console in administrative tools.
Am I doing something wrong?
< ?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />
sp_MSforeachdb 'use [?] deny all from guest'
sp_MSforeachdb 'use [?] deny all from public'
'use [?] if db_id() not between 1 and 2 begin REVOKE CONNECT FROM GUEST end'