Home All Groups Group Topic Archive Search About


Author
24 Jun 2009 7:58 PM
Paulo
Hi, if any one enters as administrator account on windows server will have
access to the MS SQL DB... I changed the sa pwd account...

I'd like just me (developer) having access to it...

Is it possible? Can I create some user that just this account can access the
MS SQL DB...? I want avoiding people entering/looking/changing the tables,
etc...

Thanks

Author
24 Jun 2009 8:28 PM
Linchi Shea
Local admin group is sysadmin in SQL Server by default. You can remove them
and just leave yourself in the sysadmin role.

From Management Studio, expand Security under the SQL instance --> expand
Server Roles --> double click on syadmin to find who's in there.

Linchi

Show quoteHide quote
"Paulo" wrote:

> Hi, if any one enters as administrator account on windows server will have
> access to the MS SQL DB... I changed the sa pwd account...
>
> I'd like just me (developer) having access to it...
>
> Is it possible? Can I create some user that just this account can access the
> MS SQL DB...? I want avoiding people entering/looking/changing the tables,
> etc...
>
> Thanks
>
>
>
Are all your drivers up to date? click for free checkup

Author
24 Jun 2009 8:55 PM
Paulo
Thanks Linchi:
Can someone copy the mdf/ldf and try to "restore" the DB from these files?
Is it possible to be done?

Show quoteHide quote
"Linchi Shea" <LinchiS***@discussions.microsoft.com> escreveu na mensagem
news:CF856974-26B3-4162-B2F8-1BEE430D1464@microsoft.com...
> Local admin group is sysadmin in SQL Server by default. You can remove
> them
> and just leave yourself in the sysadmin role.
>
> From Management Studio, expand Security under the SQL instance --> expand
> Server Roles --> double click on syadmin to find who's in there.
>
> Linchi
>
> "Paulo" wrote:
>
>> Hi, if any one enters as administrator account on windows server will
>> have
>> access to the MS SQL DB... I changed the sa pwd account...
>>
>> I'd like just me (developer) having access to it...
>>
>> Is it possible? Can I create some user that just this account can access
>> the
>> MS SQL DB...? I want avoiding people entering/looking/changing the
>> tables,
>> etc...
>>
>> Thanks
>>
>>
>>
Author
25 Jun 2009 3:21 AM
Linchi Shea
Sure! This someone can just attach them to his/her SQL instance. Now, if
someone can copy your mdf/ldf files and that someone should not be copying
these files, you have a bigger security problem.

Linchi

Show quoteHide quote
"Paulo" wrote:

> Thanks Linchi:
> Can someone copy the mdf/ldf and try to "restore" the DB from these files?
> Is it possible to be done?
>
> "Linchi Shea" <LinchiS***@discussions.microsoft.com> escreveu na mensagem
> news:CF856974-26B3-4162-B2F8-1BEE430D1464@microsoft.com...
> > Local admin group is sysadmin in SQL Server by default. You can remove
> > them
> > and just leave yourself in the sysadmin role.
> >
> > From Management Studio, expand Security under the SQL instance --> expand
> > Server Roles --> double click on syadmin to find who's in there.
> >
> > Linchi
> >
> > "Paulo" wrote:
> >
> >> Hi, if any one enters as administrator account on windows server will
> >> have
> >> access to the MS SQL DB... I changed the sa pwd account...
> >>
> >> I'd like just me (developer) having access to it...
> >>
> >> Is it possible? Can I create some user that just this account can access
> >> the
> >> MS SQL DB...? I want avoiding people entering/looking/changing the
> >> tables,
> >> etc...
> >>
> >> Thanks
> >>
> >>
> >>
>
>
>

Bookmark and Share