Post reply

Security

  • April 9, 2011 at 10:00 am

    #237476

    Hi All,

    I have read some where in this forum that if we start SQL Server in single user mode, Administrators of that box can access if built-in\administrators removed also. is that right ?

    I tried to search for that topic, but didn't found it.

    Thank You.

    Regards,
    Raghavender Chavva

  • April 9, 2011 at 11:28 am

    #1309560

    Yes you are right. This article has more information about it.

    Pradeep Adiga
    Blog: sqldbadiaries.com
    Twitter: @pradeepadiga

  • April 9, 2011 at 11:40 am

    #1309562

    Also, see this MSDN article. At the bottom, it states

    Also, if SQL Server 2005 is started in single-user mode, any user who has membership in the BUILTIN\Administrators group can connect to SQL Server 2005 as a SQL Server administrator. The user can connect regardless of whether the BUILTIN\Administrators group has been granted a server login that is provisioned in the SYSADMIN fixed server role. This behavior is by design. This behavior is intended to be used for data recovery scenarios.

    Wayne
    Microsoft Certified Master: SQL Server 2008
    Author - SQL Server T-SQL Recipes

    If you can't explain to another person how the code that you're copying from the internet works, then DON'T USE IT on a production system! After all, you will be the one supporting it!
    Links:
    For better assistance in answering your questions
    Performance Problems
    Common date/time routines
    Understanding and Using APPLY Part 1 & Part 2

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply