I have some users in my company that access our Production SQL instance via SSMS. I would like to know if there a way to block all domain users from using SQL Management Studio, except domain admin, as domain admin has 'sysadmin' rights.
We have software that utilizing Integrated Security. I would still like our users to be able to utilizing our software using the SQL Windows authenticate, but not able to logon via SSMS.
If yes, you can deny those permissions and setup appropriate auditing. It is possible to configure such that users can only view the schema and select/add data.