Friday, March 23, 2012

newbie question

Hello,
I am studying for my exam and I have a question. I have a sql server
in a domain and when the domain administrator tries to access it, he
has no problems!! But in the literature it says that a domain
administrator must be in a group that has access to the sql server in
order to connect to that server, which is not the case? Does it have
somehing to do with the builtin\administrator account?
Kind regards,
NicoYes. By default, a domain admin will get added to the local admin group when
the box joins the domain. That means a domain admin is part of the
builtin\admin group. Thus, he/she has full access to sqlserver.
"Nico" <nico.barbe@.mobiusREMOVEFORSPAM.be> wrote in message
news:eZXCly2jEHA.596@.TK2MSFTNGP11.phx.gbl...
> Hello,
> I am studying for my exam and I have a question. I have a sql server
> in a domain and when the domain administrator tries to access it, he
> has no problems!! But in the literature it says that a domain
> administrator must be in a group that has access to the sql server in
> order to connect to that server, which is not the case? Does it have
> somehing to do with the builtin\administrator account?
> Kind regards,
> Nico|||By default, domain admin will be a member of local Administrators group
which essentially maps to BUILTIN\ADMIN account on SQL Server. However if
for some reason, someone has disabled or removed the builtin\admin account
from SQL, if the domain admin is part of another group on the server, and
if that other group is a registered user within SQL Server, then the domain
admin will have access to SQL through this other group even if
builtin\admin is disabled or removed.
Thank you for using Microsoft newsgroups.
Sincerely
Pankaj Agarwal
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.sql

No comments:

Post a Comment