[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

sa role

Posted on 2009-05-15
3
Medium Priority
?
480 Views
Last Modified: 2012-05-07
I am setting up security on a new SQL Server. In the Server Role I do not want anyone to have any permissions. However, I find that the default is the public role and that allows for Connect sa permission. Can some  please explain this to me. I know that sa is sequel authentication, but how does that effect server role security. In other words when I choose properties on one of the user logins they (by default) get sa connection as a server role. What does this mean?
Thanks
0
Comment
Question by:SeTech
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 13

Expert Comment

by:St3veMax
ID: 24398871
'sa' is system administrator, a bit like Domain Admins in AD. It has control over everything.

You would NOT use this account for users to connect to, but you would create a new account (either Windows auth or SQL auth) and grant the permissions there.

HTH
0
 

Author Comment

by:SeTech
ID: 24399178
To be clear. i am looking in the Servers Role folder under Security in SSMS. In there are various roles, one of which is publc. Then when I check the properties of that role (public) it shows permission connect and grantor - sa. And that is the system administrator? And if yes I should change it to Deny. Because when I look into the properties of a login the default is public.
0
 
LVL 13

Accepted Solution

by:
St3veMax earned 1500 total points
ID: 24399271
By default every account is made a member of the public role. If you change that to deny; should you need to connect with SA to correct some issue that's gone horribly wrong; you wont be able to.

I would leave those permissions alone as you dont really need to worry about those unless you give our the sa username and password for folks to connect with which I strongly advise against.

HTH
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are some very powerful Dynamic Management Views (DMV's) introduced with SQL 2005. The two in particular that we are going to discuss are sys.dm_db_index_usage_stats and sys.dm_db_index_operational_stats.   Recently, I was involved in a di…
In SQL Server, when rows are selected from a table, does it retrieve data in the order in which it is inserted?  Many believe this is the case. Let us try to examine for ourselves with an example. To get started, use the following script, wh…
This course is ideal for IT System Administrators working with VMware vSphere and its associated products in their company infrastructure. This course teaches you how to install and maintain this virtualization technology to store data, prevent vuln…
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question