Deny domain administrators to select from sql server tables ( SQL server 2005)
I have added the "domain admin" group to the Sql Server, and set permission as "Deny" to connect to the database engine.
All employees of this group can still select from any table.
The sql server "public" role does not have any permissions on any database table.
The "domain admin " group has local admin rights.
I can't remove this server from domain.
Please advise.
Thank you very much
Igor
52826@paulweiss.com
Software/Hardware used:
Software/Hardware used:
ASKED:
March 2, 2009 8:28 PM
UPDATED:
March 2, 2009 11:45 PM
RELATED QUESTIONS
- InfoPath cannot connect to data source
- Any unsurpassed method to start-off this procedure an appropriate
- W2k3 secondary domain controller recovery: join or trust with primary domain controller lost
- SQL 2005 Security to access 2 databases on same server via Stored Procedure
- GPO Filtering out a specific Group from
Answer Wiki:
Add your DBAs as members of the sysadmin fixed server role.
Then remove the BUILTINAdministrators group from the server.
Make sure that you know the password for the sa account before you do this. If you do it in the wrong order you will loose sysadmin access to the SQL Server.
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
