Administrator Group Permissions On Server For DBAs
Nov 18, 2015
We have an audit happening on our DB environments. All are SQL2008R2. One of the risk highlighed is DBAs are also part of 'Administrators' group on the server. The DBAs having sysadmin (ie full control)on SQL server is not a risk but DBAs included in 'Administators' group is termed as risk.
My question is do the DBAs really need to be Administrator on the box apart from Sysadmins??. If yes,What are the scenarios in which DBA group also need to be an administrator on the box to manage daily admin activities.Â
View 4 Replies
ADVERTISEMENT
Mar 28, 2008
Do DBAs need OS Administrator rights to Manage SQL Server? I suspect the answer is no, but, the DBAs tell me that they cannot do their jobs without OS admin rights.
Can someone point me to documentation detailing what OS level rights are needed by SQL Server DBAs?
View 3 Replies
View Related
Jul 16, 2002
We are trying to set up SQLAgent Proxy account. If the SQLServer service id is a domain admin, do we still have to add it to the local administrators group?
Jeff
View 1 Replies
View Related
Oct 5, 2006
Hi,
I've created an rdl report in reporting services 2005. Report is working fine. I've deployed this report on SQL Server 2005. The problem is this that to access the reports from client, I need to add client's login ID in Administrator user's group os server. If I dont add them in that group, it shows following error:
"The permissions granted to user 'loginname' are insufficient for performing this operation. (rsAccessDenied)".
This solution works fine in development but in actual environment, I can't add users in that group. Can anyone tell me how to view reports without adding user in administrator group. Its urgent.
Looking forward for help.
View 3 Replies
View Related
Nov 22, 2005
Please help! I am new in SQL Server 2000 Administration. My manager had ask me to manage a SQL Server, but Windows Adminstrator refuse to give me Local Admin rights. I only have sa account to login to databases. I don't know any excuses or reasons to give to Windows Adminstrator so that he can give me the local admin rights. If any one have this answer, please help. Thank you.
-JC
View 4 Replies
View Related
Jan 12, 2006
Hi,
I am trying to make an oracle publiching from sql server 2005 enterprise final release, i installed the oracle client 10.2 (10g) on the same server where sql server already installed, i made different connection to oracle database instance and it was ok.
from sql server : right click on publication -New oracle publication-Next-Add Oracle Publisher-Add button-Add Oracle Publisher-i entered server insttance test1 and their users and passwords--connect --->
the oracle publisher is displayed in the list of publisher but when press ok i got the following error :
TITLE: Distributor Properties
------------------------------
An error occurred applying the changes to the Distributor.
For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&ProdVer=9.00.1399.06&EvtSrc=Microsoft.SqlServer.Management.UI.DistributorPropertiesErrorSR&EvtID=ErrorApplyingDistributor&LinkId=20476
------------------------------
ADDITIONAL INFORMATION:
SQL Server could not enable 'test1' as a Publisher. (Microsoft.SqlServer.ConnectionInfo)
------------------------------
An exception occurred while executing a Transact-SQL statement or batch. (Microsoft.SqlServer.ConnectionInfo)
------------------------------
The permissions associated with the administrator login for Oracle publisher 'test1' are not sufficient.
Changed database context to 'master'. (Microsoft SQL Server, Error: 21684)
For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&ProdVer=09.00.1399&EvtSrc=MSSQLServer&EvtID=21684&LinkId=20476
------------------------------
BUTTONS:
OK
------------------------------
Any idea about this error ?
Thanks
Tarek Ghazali
SQL Server MVP.
View 2 Replies
View Related
Feb 14, 2006
Hello,
I have been working as Sybase DBA for 5+ years, and I would very much like to add MS SQL Server to my resume. Given the common roots of the two RDBMS, it seems that the learning curve would not be as sharp as if I were going to learn Oracle or DB2. Can anyone out there know of any books that are geared toward learning MS SQL Server from a Sybase DBAs perspective?
Thank you,
- Chris Merz
View 3 Replies
View Related
Dec 2, 1999
Is there a standard sp to run to view permissions by group
View 1 Replies
View Related
Jan 15, 2008
Hi all,
i currently trying to set up the permissions on the reporting services. I added two groups to my Active Directory and granted browser-permissions on the Report Manager to the home folder for these two groups.
When i try to open the report manager site on the user's computer (which is in one of the two groups) i see only the menu on the top and the rest of the page is blank. No folders are displayed.
When i try to open the website using admin permissions (on my workstation) everything is working fine. Now i'm a little bit confused and i started to test some other scenario's.
I tried to add the domain user to the permission tab in the report manager with Browser-Permissions. Now i'm able to see the folders and reports into the report manager on the client workstation. Also all reports are working well.
now I'm totaly confused!! I also tried to find out something from the manual (yes i read the manual ), into the internet and in the MS Forum's.
Did i forgot to set somewhere an additional security option? Is this a known bug from SQL 2005 SP2? I don't know. The only thing i know is, that i have to get this working with group permissions.
Does anyone have an idea regarding this?
Sql2005 SP2 is Running on an Windows Server 2003 SP1
Kind Regards from Hamburg / Germany
Dennis
IT Administrator
View 3 Replies
View Related
Jul 11, 2006
Hi guys,
I'd appreciate your thoughts on this. Not done too much DB admin. Usually I do development work and the admins to the admin.
The database is behind an API of stored procedures to manipulate the data, and views to select the data.
The database needs to be accessed remotely by multiple clients.
How best to keep the database secure?
Create a new user and login on the database which is made known to all client applications. Then grant execute permission on the stored procs and grant select on the views?
There is probably a better way than one login for all? Should I be looking at roles and groups etc? If so, how best to set that up?
A few pointers would be gratefully received!
View 5 Replies
View Related
Jun 6, 2007
Hi, i am trying to find permissions on SQL server database tables for a usergroup defined in Active Directory.
there is one function in SQL : €śSELECT * FROM fn_my_permissions('TableName', 'OBJECT')€?
This function get me the permission on TableName table for the current user. but i want that inforamtion for a user group defined in AD.
Is tehre any way to acheive that?
-Mani
View 1 Replies
View Related
Aug 26, 2005
I have a challenge for all DBAs. I am getting INCONSISTENT TIMINGS for Querry Results from a SQL Server 2000 Standard Edition on a HP Proliant 2 CPU Server with 4 GB RAM and SCSI DrivAFAe.
Our Database is 72 million records and have 8 columns. Most of them are indexed, which are used in the “Where…� clause. In addition to independent indexes, we also have a covering index for 3 most frequently searched fields.
My challenge is that out of the 7000 odd queries that hit the server with various search conditions in a Week, 5% of the queries return result in less than a minute.
The same query at a different Time or with a different Value, returns results inconsistently. For e.g. searching FirstName = “Anna�; LastName = “Williams� returns result in 0.01 sec. Searching for FirstName “Benjamin�; LastName = “Watson� returns in 5 minutes.
Any kind of help is welcome and will be highly appreciated.
- Santy
san.rely@gmail.comNote: Edited to fix white on white font.
View 1 Replies
View Related
Apr 21, 2002
Where are all of the Production DBAs?
Is there such a thing as a Production DBA in the SQL Server world or is this an outdated concept? Is there a market for people who specialize in database administration as distinct from software development or general network admin? I believe there are such people in the Oracle world, is the SQL Server world different in this regard? Can anyone give me suggestions about how to go about filling such a position?
I am a New York City area employer seeking to fill a position that I think would be ideal for a DBA with 3-5 years of experience in a production environment. The salary would be somewhere between $50K and $60K.
The position involves administering a SQL Server cluster and SAN running our core business application, plus several ancillary SQL Server installations. The application that we are implementing is a third-party product, so no real development is being done at our site. It is, however, fairly complex and requires customization and we do have significant reporting and EDI requirements, so strong T-SQL skills are required.
We are a medium-sized operation, with 900 employees and an eight person IT Dept; the organization’s main focus is insurance not IT, so candidates with a lot of experience might not find it challenging enough, but I think it would be an excellent opportunity for a candidate who might be stuck in the back of a large IT Dept. who wants to move up to a more visible position in a smaller organization.
I would think that there would be a lot of people in this category and, indeed, we have received a lot of resumes, but few of them are from the type of candidate that I had in mind. Most of the resumes are from people whose main focus is development or, if they have had experience in a production environment, have had 10+ years and are seeking salaries way beyond what we can pay. As for the former, I would not automatically reject someone whose prior experience was as a developer—and these skills would certainly be useful to us--I would just be worried that they wouldn’t be happy if they weren’t spending all of their time developing.
http://jobsearch.monster.com/getjob.asp?JobID=14475846&AVSDM=2002%2D04%2D04+16%3A29%3A00%2E000&CCD=my%2Emonster%2Ecom&JSD=jobsearch%2Emonster%2Ecom&HD=company%2Emonster%2Ecom&Logo=1
View 2 Replies
View Related
Jul 23, 2005
for sql servers how can i determine who [what accounts] are the dbas?
View 1 Replies
View Related
Jan 25, 2003
worm attack on SQL Servers 1434 port.
Read the links below.
http://www.cert.org/advisories/CA-2003-04.html
:rolleyes:
View 13 Replies
View Related
Oct 29, 2007
Hi all,
I am a Windows Sysadmin (Active Directory, infrastructure, etc) with light knowledge of SQL 2005. I can set up the database cluster on a shared storage device, I know how to get the heartbeat, do simple backups, etc.
My question pertains to disaster recovery. Right now, we use a product called DoubleTake to copy our database over and 'assume' the identity of the failed SQL server. There are two problems with this -- cost of the license of DoubleTake, and additionally, is it the best method?
I have read before, that you don't need to be a DBA to set up a DR scenario for SQL. My goal really is to have two databases -- one in our production location, and one in a DR location that is pretty much cold (for licensing issues).
If our production database should go down, then it would fail over to the DR site.
What is involved in doing this, what type of steps are required, do you NEED a DBA to manage this, or can a sysadmin (such as myself) take care of it? Also, is it worth having DoubleTake to do this job, and does it do a better or worse job, are there limitations, etc.
Thank you for any replies you can give, and please keep in mind that I'm far from a DBA .
View 5 Replies
View Related
Mar 3, 2004
I've installed this on my server and I can control a SQL Database located on a remote server (networked together via Cross Over) but when accessing from the Web it keeps prompting me with a Windows Log In.
Does anyone know how I can prevent this so that the web page displays and we can enter our SQL information to log in using SQL Authentication.
Thanks.
View 2 Replies
View Related
Jan 13, 2000
I read in Computer Weekly (Jan 6th 2000) about a bug in SQL Server 7. This means that any user can get hold of the administrator (sa) password.
Does anyone know anything more about this ??
thanks
Paul
View 2 Replies
View Related
Mar 17, 2004
The SQL Server Web Data Administrator enables you to easily manage your SQL Server data, wherever you are. Using its built-in features, you can do the following from Microsoft Internet Explorer or your favorite Web browser:
1. Create and edit databases in SQL Server 2000 or Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
2. Perform ad-hoc queries against databases and save them to your file system
3. Export and import database schema and data
4. Manage users and roles
5. View, create and edit stored procedures
Whether you are doing Microsoft Windows or Web development, or just need remote access to data for yourself or your clients, the Web Data Administrator is the perfect complement to your toolbox.
So Get it HERE (http://www.microsoft.com/downloads/details.aspx?FamilyID=C039A798-C57A-419E-ACBC-2A332CB7F959&displaylang=en)
View 5 Replies
View Related
Aug 3, 2004
I have installed Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) and the SQL Server Web Data Administrator. After I run the SQL Server Web Data Administrator it
is asking me for login and password. How can I determine my login and password? Thank you.
View 1 Replies
View Related
Feb 10, 2005
Is it possible to install this on a remote web server and set it to use SQL accounts? I installed this on my host and it keeps prompting me for a windows user name and password.
Any instructions on how to do this would be appreciated.
Charles
View 4 Replies
View Related
Nov 23, 2004
I'm so sorry if this is a stupid question. I'm experienced PHP/MySQL developer, but this is my first SQL Server project, I'm really not familiar with Microsoft development tools at all. I have Visual Studio .NET installed. I've just downloaded and installed SQL Server Web Data Administrator. There was no errors during the installation, but when I'm trying to use it to connect to the database I had set up on the hosting server, I get the error message below:
Server Error in '/webadmin' Application.
--------------------------------------------------------------------------------
COM object with CLSID {10020200-E260-11CF-AE68-00AA004A34D5} is either not valid or not registered.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Runtime.InteropServices.COMException: COM object with CLSID {10020200-E260-11CF-AE68-00AA004A34D5} is either not valid or not registered.
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
Stack Trace:
[COMException (0x80040154): COM object with CLSID {10020200-E260-11CF-AE68-00AA004A34D5} is either not valid or not registered.]
SqlAdmin.SqlServer.Connect()
SqlWebAdmin.databases.Page_Load(Object sender, EventArgs e) +28
System.Web.UI.Control.OnLoad(EventArgs e) +55
System.Web.UI.Control.LoadRecursive() +27
System.Web.UI.Page.ProcessRequestMain() +731
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:1.1.4322.573; ASP.NET Version:1.1.4322.573
If anyone knows what is the problem and can point me in the right direction, I'd really appreciate.
Inna
View 1 Replies
View Related
Apr 10, 2008
Hello,
There is a SQL Server databse installed in my machine.
I want to modify a data in a table.
How can I access the data with ODBC Administration?
Thanks
View 6 Replies
View Related
Jun 18, 2004
I want to connect to company's SQL Server from home and to connect to home's SQL server from company remotely.
The new released SQL Server Web Data Administrator by Microsoft seems solving my issue.
I use it to connect to different SQL servers in different domains company wide successfully, but I failed to connect to home from company( I have static IP on the home server).
Also I want to know how to configure the sever name if I want to connect to company's SQL Server from home. The company SQL server is inside the firewall with a internal IP. How it works?
Any ideas?
Thanks!
View 4 Replies
View Related
May 28, 2015
After installing SSMS on some computers - the only way we can get SSMS to run correctly is to run it as the administrator. Is there a way where you don't have to do that? These end users are logging as themselves and have accounts in SQL Server all set up - but SSMS will only launch for them if we right click and select "run as administrator".After doing some digging - it seems that this is a common problem out there.
View 3 Replies
View Related
May 3, 2007
Sql server driver missing from odbc administrator;
Software; SQL Server 2005 SP2 installed on W23K SP1.
Under Drivers tab in odbc administrator the sql server that uses sqlsrv32.dll, is missing. All the other drivers that comes with W2K3 Service pack1 is there. In addition i can see the SQL Native Client(SQLNCLI.DLL).
I have an application that has to use SQL Server Driver. How can i get it back?
Hope someone can help me?
View 4 Replies
View Related
Apr 5, 2007
I have a root domain and child domain.
After using ADMT to migrate the domain user or group into the root domain, when I use enterprise manager to try and change the permissions allocated to that domain user/group, i get the 'Error 15401 NT user or Group not found'.
This is a correct error as the user is now in the root domain, however sql (in sysxlogins) still thinks its in the child domain.
Is there a simpler way, other than collecting the users permissions, deleting the user from SQL then adding back in with the correct domainusername format, then adding the permissions back?
I tried renaming the 'name' in sysxlogins (not recommended) and while that worked, whenever I tried to add the migrated user to another database, the login name was missing and would not resolve.
I believe it is something to do with the SID not matching.
Any ideas on how to fix this ?
View 1 Replies
View Related
Apr 30, 2008
I would like to setup the membership and role in web administrator tool, however, under Security section, I got the error message of "Unable to connect to SQL database".
I tried to run aspnet_regsql.exe to edit the config(C:WINDOWSMicrosoft.NETFrameworkv2.0.50727>aspnet_regsql.exe), however, it still shows this error message.
I am using web developer 2008 and SQL Server 2005.
Please advice me how to tackle this problem.
Thank you.
View 4 Replies
View Related
Jul 20, 2004
Hi,
Can any of you tell me how to create a login in SQL Server 6.5 with System Administrator privileges, like we can do with SQL 7 or SQL 2000 ? I don't want to use the sa login.
Thanks
View 1 Replies
View Related
Sep 1, 2006
If i install the SQL Server Express and the Management Studio in my computer with an administrator account... can a non-administrator user run the SQL Server Management Studio Express ?
When the non-administrator user tries run the SSEMS, he gets an error, something like "Cannot load the SQL Management Studio Package".
Can i set several permissions to let non-administrator users run the SSEMS ?
View 1 Replies
View Related
May 15, 2002
Trying to upgrade a 6.5 to a 2K.
Running SQL Agent from an admin account, admin account active as admin on both 6.5 machine and 2K machine, but I can not get the upgrade past the second screen, where I get the error message:
Unable to connect to export server, please verify that you are an NT Administrator on that machine.
Stefanie
View 1 Replies
View Related
Jul 20, 2005
HI!I have a little problem:I have change the administrator password (Windows 2003 Server) which MSSQL 2000 use to login.And now the SQL server can't stand up.What should I do?thx!gicio--Posted via http://dbforums.com
View 1 Replies
View Related
