Link to home
Start Free TrialLog in
Avatar of Pau Lo
Pau Lo

asked on

builtin\administrators part of sysadmin role

Can anyone give me a managers (idiots) guide on the overal risk by adding the builtin\administrators group the sysadmin role in MSSQL?

Whats the risk?

And do you configure your MSSQL Servers so that BUILTIN\admins are not memebers of the sysadmin role?

Does not having BUILTIN\admins as memebers of the sysadmin role cause any issues in managing systems?
ASKER CERTIFIED SOLUTION
Avatar of strivoli
strivoli
Flag of Italy image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pau Lo
Pau Lo

ASKER

for domain joined computers, doesnt builtin\administrators also include domain admins domain group?
Yes, it includes the local Administrator and the "DOMAIN\Domain Admins" group.
Avatar of Pau Lo

ASKER

Is it common for places just to grant DBA's sysadmins, and general server admins have no need to be sysadmins?
Usually, general server admins don't need to be SQL's sysadmins because they are 2 different roles which require different knowledge and vice-versa.