Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 755
  • Last Modified:

'BUILTIN\Administrators' = sa?

are all logins added into 'BUILTIN\Administrators'  by rule, sysadmins?

thanks
0
anushahanna
Asked:
anushahanna
4 Solutions
 
Karim-SaidCommented:
Hi,
All members of BUILTIN\Administrators ==SA == urestricted access to the machine.
The above applies to Local machine.

Also
Members of Domain Admin group is by default added to the BUILTIN\Administrators group when you join any machine to a domain.

BestRegards,
migo
0
 
DBAduck - Ben MillerPrincipal ConsultantCommented:
But you can remove the BUILTIN\Administrators from the Sysadmin server role, as long as your SQL Server Service account is specified as a login (in 2008 and below, R2 uses Service instead of Group authorization).

I normally remove BUILTIN\Administrators from the SQL Server logins because I do not want the Domain Admins group from AD to be automatic Sysadmins.  If it is necessary, then I just remove sysadmin role and leave it at that.
0
 
xiong8086Commented:
BUILTIN\Administrators  is not SA.

sa is pure SQL server login account.

BUILTIN\Administrators is a server role with all rights what sa has.

0
 
CboudrozCommented:
BUILTIN\Administrators = Windows Login
SA = SQL server Login
sysadmin = SQL server roles

SA is always member of sysadmin (you cannot remove it)

BUILTIN\Administrators are member of sysadmin by default in SQL 2000 and 2005, but not in 2008

if you want your BUILTIN\Administrators to have the same right as SA you need to add it in sysadmin SQL server roles.
0
 
anushahannaAuthor Commented:
Thanks.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now