Pau Lo
asked on
builtin\administrators part of sysadmin role
Can anyone give me a managers (idiots) guide on the overal risk by adding the builtin\administrators group the sysadmin role in MSSQL?
Whats the risk?
And do you configure your MSSQL Servers so that BUILTIN\admins are not memebers of the sysadmin role?
Does not having BUILTIN\admins as memebers of the sysadmin role cause any issues in managing systems?
Whats the risk?
And do you configure your MSSQL Servers so that BUILTIN\admins are not memebers of the sysadmin role?
Does not having BUILTIN\admins as memebers of the sysadmin role cause any issues in managing systems?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Yes, it includes the local Administrator and the "DOMAIN\Domain Admins" group.
ASKER
Is it common for places just to grant DBA's sysadmins, and general server admins have no need to be sysadmins?
Usually, general server admins don't need to be SQL's sysadmins because they are 2 different roles which require different knowledge and vice-versa.
ASKER