Avatar of Pau Lo
Pau Lo asked on

local administrator sysadmin role

If  you have MSSQL  on say a windows 2008 server, if a local administrator (OS) is not currently a sysadmin in MSSQL, just by being local admin on the server, can they make themselves sysadmin? Or if not what permissions do they need to make them sysadmin?

MS recommend not having builtin\admins as part of the sysadmin role, but if they could just grant themselves that permission it seems a waste of time investigating and removing local admins from that role in MSSQL
Microsoft SQL ServerMicrosoft SQL Server 2008Microsoft SQL Server 2005

Avatar of undefined
Last Comment
Scott Pletcher

8/22/2022 - Mon
SOLUTION
dec0mpile

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
ASKER CERTIFIED SOLUTION
Scott Pletcher

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Scott Pletcher

A Windows admin on that box can stop the SQL service, restart it in single user mode, add a sysadmin login of their choosing, stop SQL and restart it normally.  Based on the discussions of this I've seen, there's no real way to prevent it even in SQL 2008 (don't know about for SQL 2012).
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes