Wednesday, March 7, 2012

Removing Guest and BUILTIN\Administrator accounts

Alll, I am looking for advice on disabling the "guest" account on SQL Server
2000.
-Are there any negatives or issues with doing this?
I am also looking to remove the BUILTIN\administrator account.
-Are there any negtive implications of removing this account?You can remove the guest user account from all database
except for master and tempdb. The guest account is needed in
these databases.
In terms of removing the builtin\administrators group, it
depends. The following article has an additional information
section with links to some issues that could come up:
INF: How to impede Windows NT administrators from
administering a clustered instance of SQL Server
http://support.microsoft.com/?id=263712
-Sue
On Fri, 27 Feb 2004 12:16:08 -0800, "RobDowdy"
<anonymous@.discussions.microsoft.com> wrote:

>Alll, I am looking for advice on disabling the "guest" account on SQL Serve
r 2000.
>-Are there any negatives or issues with doing this?
>I am also looking to remove the BUILTIN\administrator account.
>-Are there any negtive implications of removing this account?|||Usually you would replace the Builtin\administrators login with one of your
own creation. I create a group in AD called SQLAdmins, map it to a login in
SQL Server, make it a member of the sysadmins fixed server role. If the
service account is getting sysadmin permission thru membership in the local
administrators group, be sure and add the service account to your new
SQLAdmins group in AD.
Remove Pubs and Northwind from a production server.
Don't create a guest account in any production databases.
Refrain from using the public role to grant permissions to users.
Bill
"Sue Hoegemeier" <Sue_H@.nomail.please> wrote in message
news:s8bv301qe57kudb5vs2h72ah2vr52k1kdt@.
4ax.com...
> You can remove the guest user account from all database
> except for master and tempdb. The guest account is needed in
> these databases.
> In terms of removing the builtin\administrators group, it
> depends. The following article has an additional information
> section with links to some issues that could come up:
> INF: How to impede Windows NT administrators from
> administering a clustered instance of SQL Server
> http://support.microsoft.com/?id=263712
> -Sue
> On Fri, 27 Feb 2004 12:16:08 -0800, "RobDowdy"
> <anonymous@.discussions.microsoft.com> wrote:
>
Server 2000.
>

No comments:

Post a Comment