Link to home
Start Free TrialLog in
Avatar of Pau Lo
Pau Lo

asked on

SQL Server permissions

ALthough not a SQL DBA myself, we have a SQL Server Healthcheck soon whereby I am told the assessor needs full access to the SQL Server Operating Systems and SQL Server itself. For the OS we can grant them temporary admin access, but for SQL Server, what would they need, do you need to grant them access to a database account per database, or would domain admin rights typically cover admin access to the SQL Servers as well?

Also how is likely they would access SQL Server, would they remote onto the Server? Or use tools locally on a designated PC?
ASKER CERTIFIED SOLUTION
Avatar of Lee
Lee
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pau Lo
Pau Lo

ASKER

Its a shame you cant consolodate it to just one domain account, I would have thought systems with windows authentication domain admins will by default have sysadmin privileges  in every instance?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
>> Its a shame you cant consolodate it to just one domain account, I would have thought systems with windows authentication domain admins will by default have sysadmin privileges  in every instance?

Its the way it worked with older version of SQL Server.
However starting from SQL Server 2005 onwards, windows admins will not have sysadmin rights at SQL Server level unless otherwise granted explicitly for Security reasons.
Avatar of Pau Lo

ASKER

So when you remote onto the server with your domain admin credentials, fire up sql server management studio, are you then prompted for either a SQL or AD username/password?
>> are you then prompted for either a SQL or AD username/password?

You can simply select any one of them..