Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 680
  • Last Modified:

SQL 2005 Surface Area Configuration

Hi

Environment:
Windows 2003 ENT SP2 R2 x64
MS Cluster Services (2-node)
SQL 2005 ENT SP2 x64

Possibly a straight forward answer.
Everything is setup and working 100%.

Problem I am having is opening SQL Surface Area Configuration with a user that is not an administrator but does have SYSADMIN role within SQL?

***I connect to 'remote' server - The virtual cluster name for SQL***


SQLSAC works absolutely fine when opened with a user who is administrator.

The error I get is:

"Computer XYZ does not exist on the network, or the computer cannot be configured remotely. Verify that the remote computer has the required Windows Management Instrumentations components and then try again."

I am thinking it has to be in the WMI security permissioning? I have checked, WMIMGMT.msc and the security but I though I would like to see what others may think before I go playing with the WMI permissioning.

As a secondary note, in SQL Server Configuration Manager, SQL Server 2005 Services has an error "The server threw an exception [0x80010105]".

As I say, this only affects users that are not administators (but have SYSADMIN role on SQL) so I do not want to have to test starting SQL browser etc.

Any help appreciated.

Cheers
Bry


On a 2
0
bryan oakley-wiggins
Asked:
bryan oakley-wiggins
  • 2
1 Solution
 
bryan oakley-wigginsSenior Cloud EngineerAuthor Commented:
it may be possible that this is by design, in securing the config/management of MSCS and SQL 2005 you need to be local admin...

Cheers
Bry
0
 
BrandonGalderisiCommented:
The sysadmin role is something that you have within the database engine itself.  It doesn't mean that you have access to make changes to the physical server.  These things are not configured from within SSMS for a reason :).

I can't explain the errors, but you have to be a local admin to modify the SAC.
0
 
bryan oakley-wigginsSenior Cloud EngineerAuthor Commented:
Hi BrandonGalderist

Thanks for confirming what I thought may be the case... Certainly makes sense.
I'll award the points, as you have confirmed this to be true :-)


Cheers
Bry
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now