RE: Deny Access to Builtin\Administrators
Here's a script we implement as a site standard during initial server build: use master go exec sp_grantlogin 'DOMAIN\sv-sqlserver' --> each of these domain user accounts exec sp_grantlogin 'DOMAIN\sv-sqlagent' --> are in tyhe local administrators group exec sp_grantlogin 'DOMAIN\sqladmin' --> via a domain group on all sql servers go checkpoint go exec sp_addsrvrolemember @loginame='DOMAIN\sv-sqlserver', @rolename='sysadmin' exec sp_addsrvrolemember @loginame='DOMAIN\sv-sqlagent', […]
2005-02-24