Solved

'BUILTIN\Administrators' = sa?

Posted on 2010-09-16
5
736 Views
Last Modified: 2012-05-10
are all logins added into 'BUILTIN\Administrators'  by rule, sysadmins?

thanks
0
Comment
Question by:anushahanna
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 4

Accepted Solution

by:
Karim-Said earned 125 total points
ID: 33694523
Hi,
All members of BUILTIN\Administrators ==SA == urestricted access to the machine.
The above applies to Local machine.

Also
Members of Domain Admin group is by default added to the BUILTIN\Administrators group when you join any machine to a domain.

BestRegards,
migo
0
 
LVL 24

Assisted Solution

by:DBAduck - Ben Miller
DBAduck - Ben Miller earned 125 total points
ID: 33696005
But you can remove the BUILTIN\Administrators from the Sysadmin server role, as long as your SQL Server Service account is specified as a login (in 2008 and below, R2 uses Service instead of Group authorization).

I normally remove BUILTIN\Administrators from the SQL Server logins because I do not want the Domain Admins group from AD to be automatic Sysadmins.  If it is necessary, then I just remove sysadmin role and leave it at that.
0
 
LVL 3

Assisted Solution

by:xiong8086
xiong8086 earned 125 total points
ID: 33697846
BUILTIN\Administrators  is not SA.

sa is pure SQL server login account.

BUILTIN\Administrators is a server role with all rights what sa has.

0
 
LVL 7

Assisted Solution

by:Cboudroz
Cboudroz earned 125 total points
ID: 33705267
BUILTIN\Administrators = Windows Login
SA = SQL server Login
sysadmin = SQL server roles

SA is always member of sysadmin (you cannot remove it)

BUILTIN\Administrators are member of sysadmin by default in SQL 2000 and 2005, but not in 2008

if you want your BUILTIN\Administrators to have the same right as SA you need to add it in sysadmin SQL server roles.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 33762768
Thanks.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Slowly Changing Dimension Transformation component in data task flow is very useful for us to manage and control how data changes in SSIS.
Recently we ran in to an issue while running some SQL jobs where we were trying to process the cubes.  We got an error saying failure stating 'NT SERVICE\SQLSERVERAGENT does not have access to Analysis Services. So this is a way to automate that wit…
Using examples as well as descriptions, and references to Books Online, show the different Recovery Models available in SQL Server and explain, as well as show how full, differential and transaction log backups are performed
Viewers will learn how the fundamental information of how to create a table.

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question