Deny domain administrators to select from sql server tables ( SQL server 2005)
Home > IT Answers > SQL Server > Deny domain administrators to select from sq...
IgorS
5 pts.
0
Q:
Deny domain administrators to select from sql server tables ( SQL server 2005)
SQL Server, SQL Server tables, SQL Server permissions, SQL Server security

I have added the "domain admin" group to the Sql Server, and set permission as "Deny" to connect to the database engine.

All employees of this group can still select from any table.

The sql server "public" role does not have any permissions on any database table.

The "domain admin " group has local admin rights.
I can't remove this server from domain.
Please advise.
Thank you very much
Igor
52826@paulweiss.com
ASKED: Mar 2 2009  8:28 PM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
RELATED QUESTIONS
0
Mrdenny
46765 pts.
0
A:
 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0
  • AddThis Social Bookmark Button
Add your DBAs as members of the sysadmin fixed server role.

Then remove the BUILTIN\Administrators group from the server.

Make sure that you know the password for the sa account before you do this. If you do it in the wrong order you will loose sysadmin access to the SQL Server.
Last Answered: Mar 2 2009  11:45 PM GMT by Mrdenny   46765 pts.
  •   
0
0
RSS - Discussions Help
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



0