Solved

'BUILTIN\Administrators' = sa?

Posted on 2010-09-16
5
721 Views
Last Modified: 2012-05-10
are all logins added into 'BUILTIN\Administrators'  by rule, sysadmins?

thanks
0
Comment
Question by:anushahanna
5 Comments
 
LVL 4

Accepted Solution

by:
Karim-Said earned 125 total points
ID: 33694523
Hi,
All members of BUILTIN\Administrators ==SA == urestricted access to the machine.
The above applies to Local machine.

Also
Members of Domain Admin group is by default added to the BUILTIN\Administrators group when you join any machine to a domain.

BestRegards,
migo
0
 
LVL 24

Assisted Solution

by:DBAduck - Ben Miller
DBAduck - Ben Miller earned 125 total points
ID: 33696005
But you can remove the BUILTIN\Administrators from the Sysadmin server role, as long as your SQL Server Service account is specified as a login (in 2008 and below, R2 uses Service instead of Group authorization).

I normally remove BUILTIN\Administrators from the SQL Server logins because I do not want the Domain Admins group from AD to be automatic Sysadmins.  If it is necessary, then I just remove sysadmin role and leave it at that.
0
 
LVL 3

Assisted Solution

by:xiong8086
xiong8086 earned 125 total points
ID: 33697846
BUILTIN\Administrators  is not SA.

sa is pure SQL server login account.

BUILTIN\Administrators is a server role with all rights what sa has.

0
 
LVL 7

Assisted Solution

by:Cboudroz
Cboudroz earned 125 total points
ID: 33705267
BUILTIN\Administrators = Windows Login
SA = SQL server Login
sysadmin = SQL server roles

SA is always member of sysadmin (you cannot remove it)

BUILTIN\Administrators are member of sysadmin by default in SQL 2000 and 2005, but not in 2008

if you want your BUILTIN\Administrators to have the same right as SA you need to add it in sysadmin SQL server roles.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33762768
Thanks.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Everyone has problem when going to load data into Data warehouse (EDW). They all need to confirm that data quality is good but they don't no how to proceed. Microsoft has provided new task within SSIS 2008 called "Data Profiler Task". It solve th…
Ever wondered why sometimes your SQL Server is slow or unresponsive with connections spiking up but by the time you go in, all is well? The following article will show you how to install and configure a SQL job that will send you email alerts includ…
Familiarize people with the process of retrieving data from SQL Server using an Access pass-thru query. Microsoft Access is a very powerful client/server development tool. One of the ways that you can retrieve data from a SQL Server is by using a pa…
Using examples as well as descriptions, and references to Books Online, show the documentation available for date manipulation functions and by using a select few of these functions, show how date based data can be manipulated with these functions.

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question