Results 1 to 3 of 3
  1. #1
    Super Moderator
    Join Date
    Aug 2001
    Location
    Evergreen, CO, USA
    Posts
    6,623
    Thanks
    3
    Thanked 60 Times in 60 Posts

    Securing SQL Server from Domain Admins

    Here's a fun one - one of our clients wants to secure a Win2000 Pro system running a small SQL Server development database so the IT guys can't mess with it. (There's a turf <img src=/S/argue.gif border=0 alt=argue width=50 height=25> going on.) The SQL part isn't too hard, as we can just use native security rather than the Integrated one (the problem with it is that anyone who is in domain admins logs in as 'sa' without ever knowing it). The harder part I'm concerned about is preventing them from being able to do administrative stuff across the network - for example to change the UserID that SQL Service or SQL Agent runs under, or actually shutting down services. Any suggestions on this?
    Wendell

  2. #2
    Super Moderator
    Join Date
    Aug 2001
    Location
    Evergreen, CO, USA
    Posts
    6,623
    Thanks
    3
    Thanked 60 Times in 60 Posts

    Re: Securing SQL Server from Domain Admins

    We seem to have solved our problem - the solution is to run SQL Server on a Win98/ME PC. But at least the development version can't be installed on such a PC, so we installed the SQL Server 2000 Desktop Engine that comes with AccessXP. Because it is running on a Win9x OS, SQL cannot use integrated security, and the Domain Admins users are blocked.
    Wendell

  3. #3
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Securing SQL Server from Domain Admins

    Wendell, I gotta hand it to you - who ever thought of using the Win9x platform to increase security? <img src=/S/laugh.gif border=0 alt=laugh width=15 height=15>

    Glad to hear that you solved the problem, and a creative solution it was at that!
    -Mark

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •