Restricting the existing user to creating new database

Hello

how to assign below permission to user who is already having db_owner permissions. like
1.deploy SSIS package
2. able to schedule jobs
3. able to reorg tables databases

according to my knowledge  
for deploy SSIS package i have given roles in MSDB to that user- DTsltduser, DTSadmin and DTSoperator.
for schdule jobs given SQL agent roles  SQL agent reader, SQL Agent user SQL agent operator
for reorg tables databases given sysadmin rights.

It's working fine. but i want to restrict from creating a new database. how ?

thanks.


krishna_harikAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

RiteshShahCommented:
remove that user from SysAdmin fixed server role.
0
RiteshShahCommented:
I mean remove login from sysadmin fixed server role
0
krishna_harikAuthor Commented:
we removed the sysadmin, but still he is able to create new database
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

RiteshShahCommented:
can you tell me, what server role that user has right now? just give it only one role "public"
0
krishna_harikAuthor Commented:
we only given 'public' rights and added the user to DCOM Security group.
0
krishna_harikAuthor Commented:
Any one please help me.. it is still pending to restrict the user permission.
0
Guy Hengel [angelIII / a3]Billing EngineerCommented:
is the user in a domain or local admin group?
if yes, is there still the BUILTIN\administrator login defined in your sql server logins?
if yes => the sql login mentioned has, by default, the sysadm fixed server role
which makes the user can do anything.

you need to change at that level, accordingly
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
krishna_harikAuthor Commented:
thanks for your valuable inputs from the experts
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft SQL Server

From novice to tech pro — start learning today.