Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


Restricting the existing user to creating new database

Posted on 2009-07-10
Medium Priority
Last Modified: 2013-11-10

how to assign below permission to user who is already having db_owner permissions. like
1.deploy SSIS package
2. able to schedule jobs
3. able to reorg tables databases

according to my knowledge  
for deploy SSIS package i have given roles in MSDB to that user- DTsltduser, DTSadmin and DTSoperator.
for schdule jobs given SQL agent roles  SQL agent reader, SQL Agent user SQL agent operator
for reorg tables databases given sysadmin rights.

It's working fine. but i want to restrict from creating a new database. how ?


Question by:krishna_harik
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
LVL 31

Assisted Solution

RiteshShah earned 900 total points
ID: 24821563
remove that user from SysAdmin fixed server role.
LVL 31

Assisted Solution

RiteshShah earned 900 total points
ID: 24821567
I mean remove login from sysadmin fixed server role

Author Comment

ID: 24821666
we removed the sysadmin, but still he is able to create new database
Moving data to the cloud? Find out if you’re ready

Before moving to the cloud, it is important to carefully define your db needs, plan for the migration & understand prod. environment. This wp explains how to define what you need from a cloud provider, plan for the migration & what putting a cloud solution into practice entails.

LVL 31

Assisted Solution

RiteshShah earned 900 total points
ID: 24821686
can you tell me, what server role that user has right now? just give it only one role "public"

Author Comment

ID: 24822213
we only given 'public' rights and added the user to DCOM Security group.

Author Comment

ID: 24837560
Any one please help me.. it is still pending to restrict the user permission.
LVL 143

Accepted Solution

Guy Hengel [angelIII / a3] earned 600 total points
ID: 24995457
is the user in a domain or local admin group?
if yes, is there still the BUILTIN\administrator login defined in your sql server logins?
if yes => the sql login mentioned has, by default, the sysadm fixed server role
which makes the user can do anything.

you need to change at that level, accordingly

Author Closing Comment

ID: 31601994
thanks for your valuable inputs from the experts

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Access is a place to store data within tables and represent this stored data using multiple database objects such as in form of macros, forms, reports, etc. After a MS Access database is created there is need to improve the performance and…
Lotus Notes has been used since a very long time as an e-mail client and is very popular because of it's unmatched security. In this article we are going to learn about  RRV Bucket corruption and understand various methods to Fix "RRV Bucket Corrupt…
Via a live example, show how to extract insert data into a SQL Server database table using the Import/Export option and Bulk Insert.
Viewers will learn how to use the SELECT statement in SQL and will be exposed to the many uses the SELECT statement has.

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question