If you are really cracking down, then they should not be able to schedule jobs or alter packages. You are introducing places where change is not managed. Someone should approve a package change just like an object change.

That being said, remove guest from msdb and ensure that their accounts are being used. You can grant grant them msdb access (use a role) and experiement with the permissions to the sysdtsxxx and sysjobxxx tables.

Steve Jones

sjones@sqlservercentral.com

http://qa.sqlservercentral.com/columnists/sjones

http://www.dkranch.net