Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Restricting the existing user to creating new database

Posted on 2009-07-10
8
Medium Priority
?
601 Views
Last Modified: 2013-11-10
Hello

how to assign below permission to user who is already having db_owner permissions. like
1.deploy SSIS package
2. able to schedule jobs
3. able to reorg tables databases

according to my knowledge  
for deploy SSIS package i have given roles in MSDB to that user- DTsltduser, DTSadmin and DTSoperator.
for schdule jobs given SQL agent roles  SQL agent reader, SQL Agent user SQL agent operator
for reorg tables databases given sysadmin rights.

It's working fine. but i want to restrict from creating a new database. how ?

thanks.


0
Comment
Question by:krishna_harik
  • 4
  • 3
8 Comments
 
LVL 31

Assisted Solution

by:RiteshShah
RiteshShah earned 900 total points
ID: 24821563
remove that user from SysAdmin fixed server role.
0
 
LVL 31

Assisted Solution

by:RiteshShah
RiteshShah earned 900 total points
ID: 24821567
I mean remove login from sysadmin fixed server role
0
 

Author Comment

by:krishna_harik
ID: 24821666
we removed the sysadmin, but still he is able to create new database
0
Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

 
LVL 31

Assisted Solution

by:RiteshShah
RiteshShah earned 900 total points
ID: 24821686
can you tell me, what server role that user has right now? just give it only one role "public"
0
 

Author Comment

by:krishna_harik
ID: 24822213
we only given 'public' rights and added the user to DCOM Security group.
0
 

Author Comment

by:krishna_harik
ID: 24837560
Any one please help me.. it is still pending to restrict the user permission.
0
 
LVL 143

Accepted Solution

by:
Guy Hengel [angelIII / a3] earned 600 total points
ID: 24995457
is the user in a domain or local admin group?
if yes, is there still the BUILTIN\administrator login defined in your sql server logins?
if yes => the sql login mentioned has, by default, the sysadm fixed server role
which makes the user can do anything.

you need to change at that level, accordingly
0
 

Author Closing Comment

by:krishna_harik
ID: 31601994
thanks for your valuable inputs from the experts
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to get a list of available printers for display in a drop-down list, and then to use the selected printer to print an Access report or a Word document filled with Access data, using different syntax as needed for working with …
Backups and Disaster RecoveryIn this post, we’ll look at strategies for backups and disaster recovery.
Viewers will learn how to use the INSERT statement to insert data into their tables. It will also introduce the NULL statement, to show them what happens when no value is giving for any given column.
Viewers will learn how to use the SELECT statement in SQL to return specific rows and columns, with various degrees of sorting and limits in place.

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question