removing system administrators from fixed server role

Hello all,

On Analysis Services 2005 the members of the Administrators local group are also members of the fixed server role, therefore they have full control over Analysis Services databases.

I think this can be a problem becouse many system administrators don't need full control over AS. Does someone kwon how can I remove those high privileges to the local administrator?

Thank you.

Hernan.

In Management Studio right click on the server, select properties, turn on the "Show Advanced (All) Properties" option and scroll down to the bottom and set the "Security\BuiltInAdminsAreServerAdmins" property to false.|||

Thank you Darren, your post is very usefull.

Before create this thread I tried some searches in google, microsoft and BOL... I didn't get any importart results. I would like to known how you learned this.. maybe if you used a web serach... what words did you use?

|||Sorry, I can't remember. I am a bit of an SSAS junkie and it's just one of thost things I knew.

removing Builtin\Administrators login

How can I safely remove the Builtin\Administrators login?See the following:
http://www.microsoft.com/technet/tr...chnet/prodtechn
ol/sql/maintain/security/sp3sec/SP3SEC02.ASP
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||Thanks

quote:

---

>--Original Message--
>See the following:
>http://www.microsoft.com/technet/treeview/default.asp?

---

url=/technet/prodtechn

quote:

---

>ol/sql/maintain/security/sp3sec/SP3SEC02.ASP
>Thanks,
>Kevin McDonnell
>Microsoft Corporation
>This posting is provided AS IS with no warranties, and

---

confers no rights.

quote:

---

>
>.
>

---

Removing BUILTIN\Administrators

We need to remove the BUILTIN\Administrators from reporting services. I.T. personnel do not want to be able to see restricted reports. We have two department users that have been added as Content Managers and we are running reporting services under a created domain user account that we created and not a system service. I have removed BUILTIN\Administrators from the Home folder and when I check, it comes right back. Do I need to deny access to BUILTIN\Administrator on SQL Server 2005 itself? I would apprecate any suggestions.

I used the link below and followed the steps to remove the BUILTIN\Administrators group from SQL Server 2005 and SRS 2005. Hopefully this will be helpful to others.

http://www.mssqltips.com/tip.asp?tip1017

Removing Administrators access to all folders

We would like to not allow our administrators to see sensitive Payroll information in Reporting Services. I have removed 'BUILTIN\Administrators' from all folders, yet those in the Domain Admins group can still see all of the adminstrative functions, as well as all of the folders. We don't want them to see some of the folders.

Does this have to do with the Domain Admins having local Admin rights on the server?

I think you have to install RS with another service, not Local Service or Networkservice, you can make the service to be installed to the name of a special user Financee\FinanceeAdministrator, after it remove builtin\administrators on the folders you dont want them to see,

|||Can we take Domain Administrator's out of the Local Administrators group on the server and get the same effect?|||Domain administrators are the superpowerful users, I dont think you can deny access to them