Post reply

SA AND BUILTIN\ADMINISTRATOR MODIFIED

  • September 1, 2006 at 4:46 pm

    #62268

    HI, TODAY A FOUND A DIFFERENT DATABASE ACCESS FOR ALL

    MY 'SA' AND BUILTIN\ADMINISTRATORS on every single Sql Server Installation, even on

    local databse installed.

    'SA' and Builtin\Administrator has access for all databases and user is dbo.

    When I select a single database and I try to revoke db_owner access a meSsage apperars

    SQL - DMO (ODBC SQL STATE: 4200)

    Error 15405: Cannot use the reserved user or role name 'dbO'

    and I cant´t modify sa and builtin\administrator access.

    Before this situation my 'sa' and Builtin\Administrator has no access to any database,

    I mean, in Sql Server login Properties, Database Access has no checked any database, and of course

    any Databse Role is assigned.

    How can I fix this, and where can I search the moment when it happened.

     

     

     

     

  • September 4, 2006 at 12:35 am

    #658257

    you'll need to use sp_changedbowner to change a db's owner.

    sa = systemadministrator = omnipotent meaning has all authority to do anything with all db of a serverinstance. If you make a user member of the sysadmin-sqlservergroup, when this user logs in, internaly that connection is switched to sa and the system nolonger checks for authorities.

    you can revoke builtin\administrators but be sure to check your server is using a windows account for serviceaccount ! (as well as sqlagent,..)  Change it using Enterprise manager ! it sets the needed authorities (including winsows auth.

    you can check SSC for howto and pitfalls for removing builtin\administrators.

    (btw we always remove builtin\administrators  ).

     

    Johan

    Learn to play, play to learn !

    Dont drive faster than your guardian angel can fly ...
    but keeping both feet on the ground wont get you anywhere :w00t:

    - How to post Performance Problems
    - How to post data/code to get the best help[/url]

    - How to prevent a sore throat after hours of presenting ppt

    press F1 for solution, press shift+F1 for urgent solution 😀

    Need a bit of Powershell? How about this

    Who am I ? Sometimes this is me but most of the time this is me

  • September 5, 2006 at 11:39 am

    #658618

    SA and the BUILTIN/Administrator logins ALWAYS have access to every database. As alzdba stated, you can remove the Builtin/administrator login if you want to - test it first as it could cause you some problems. But you can NEVER remove SA.

    -SQLBill

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply