Solved

Restricting the existing user to creating new database

Posted on 2009-07-10
8
532 Views
Last Modified: 2013-11-10
Hello

how to assign below permission to user who is already having db_owner permissions. like
1.deploy SSIS package
2. able to schedule jobs
3. able to reorg tables databases

according to my knowledge  
for deploy SSIS package i have given roles in MSDB to that user- DTsltduser, DTSadmin and DTSoperator.
for schdule jobs given SQL agent roles  SQL agent reader, SQL Agent user SQL agent operator
for reorg tables databases given sysadmin rights.

It's working fine. but i want to restrict from creating a new database. how ?

thanks.


0
Comment
Question by:krishna_harik
  • 4
  • 3
8 Comments
 
LVL 31

Assisted Solution

by:RiteshShah
RiteshShah earned 300 total points
ID: 24821563
remove that user from SysAdmin fixed server role.
0
 
LVL 31

Assisted Solution

by:RiteshShah
RiteshShah earned 300 total points
ID: 24821567
I mean remove login from sysadmin fixed server role
0
 

Author Comment

by:krishna_harik
ID: 24821666
we removed the sysadmin, but still he is able to create new database
0
 
LVL 31

Assisted Solution

by:RiteshShah
RiteshShah earned 300 total points
ID: 24821686
can you tell me, what server role that user has right now? just give it only one role "public"
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 

Author Comment

by:krishna_harik
ID: 24822213
we only given 'public' rights and added the user to DCOM Security group.
0
 

Author Comment

by:krishna_harik
ID: 24837560
Any one please help me.. it is still pending to restrict the user permission.
0
 
LVL 142

Accepted Solution

by:
Guy Hengel [angelIII / a3] earned 200 total points
ID: 24995457
is the user in a domain or local admin group?
if yes, is there still the BUILTIN\administrator login defined in your sql server logins?
if yes => the sql login mentioned has, by default, the sysadm fixed server role
which makes the user can do anything.

you need to change at that level, accordingly
0
 

Author Closing Comment

by:krishna_harik
ID: 31601994
thanks for your valuable inputs from the experts
0

Featured Post

[Webinar] Disaster Recovery and Cloud Management

Learn from Unigma and CloudBerry industry veterans which providers are best for certain use cases and how to lower cloud costs, how to grow your Managed Services practice in IaaS clouds, and how to utilize public cloud for Disaster Recovery

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
These days, all we hear about hacktivists took down so and so websites and retrieved thousands of user’s data. One of the techniques to get unauthorized access to database is by performing SQL injection. This article is quite lengthy which gives bas…
Viewers will learn how to use the SELECT statement in SQL and will be exposed to the many uses the SELECT statement has.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now