Solved

Restricting the existing user to creating new database

Posted on 2009-07-10
8
519 Views
Last Modified: 2013-11-10
Hello

how to assign below permission to user who is already having db_owner permissions. like
1.deploy SSIS package
2. able to schedule jobs
3. able to reorg tables databases

according to my knowledge  
for deploy SSIS package i have given roles in MSDB to that user- DTsltduser, DTSadmin and DTSoperator.
for schdule jobs given SQL agent roles  SQL agent reader, SQL Agent user SQL agent operator
for reorg tables databases given sysadmin rights.

It's working fine. but i want to restrict from creating a new database. how ?

thanks.


0
Comment
Question by:krishna_harik
  • 4
  • 3
8 Comments
 
LVL 31

Assisted Solution

by:RiteshShah
RiteshShah earned 300 total points
Comment Utility
remove that user from SysAdmin fixed server role.
0
 
LVL 31

Assisted Solution

by:RiteshShah
RiteshShah earned 300 total points
Comment Utility
I mean remove login from sysadmin fixed server role
0
 

Author Comment

by:krishna_harik
Comment Utility
we removed the sysadmin, but still he is able to create new database
0
 
LVL 31

Assisted Solution

by:RiteshShah
RiteshShah earned 300 total points
Comment Utility
can you tell me, what server role that user has right now? just give it only one role "public"
0
Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

 

Author Comment

by:krishna_harik
Comment Utility
we only given 'public' rights and added the user to DCOM Security group.
0
 

Author Comment

by:krishna_harik
Comment Utility
Any one please help me.. it is still pending to restrict the user permission.
0
 
LVL 142

Accepted Solution

by:
Guy Hengel [angelIII / a3] earned 200 total points
Comment Utility
is the user in a domain or local admin group?
if yes, is there still the BUILTIN\administrator login defined in your sql server logins?
if yes => the sql login mentioned has, by default, the sysadm fixed server role
which makes the user can do anything.

you need to change at that level, accordingly
0
 

Author Closing Comment

by:krishna_harik
Comment Utility
thanks for your valuable inputs from the experts
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

This article explains all about SQL Server Piecemeal Restore with examples in step by step manner.
Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
Via a live example, show how to backup a database, simulate a failure backup the tail of the database transaction log and perform the restore.
Via a live example, show how to setup several different housekeeping processes for a SQL Server.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now