Post reply

How do you lock down the SQL Server Agent service ??

  • June 28, 2004 at 7:59 am

    #161745

    Hello,

    MSSQL 7/2000; using Enterprise Manager tool

    I've noticed that a given user is able to START and STOP the SQL Server Agent service having been given only database access using his/her Enterprise Manager tool! <Thios option is NOT ghosted out when right clicking>.

    Is there a way to prevent this? We've had users "accidently" stop the service. 

    Many thanks. Jeff

  • June 28, 2004 at 9:40 am

    #512215

    Don't have anything I can test with but I am assuming these are Windows Accounts not SQL accounts that are doing this. You can remove the rights to start/stop services for windows accounts at the user account level in windows

  • June 28, 2004 at 12:31 pm

    #512250

    Hi,

    I tested a MSSQL Authentication account user. Our environment is mixed mode, so scenerios/suggestions for both accounts (SQL & NT) would be very much appreciated.

    Many thanks. Jeff

  • June 28, 2004 at 1:25 pm

    #512259

    It still shows up in the right-click menu, however if one of those non-sysadmin users tried to stop/start the service.  They would receive an error message stating "Access Denied".

     

    Thanks,



    A.J.
    DBA with an attitude

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply