BUILTINAdministrators
Mar 4, 2002Hi,
Are there any implications for removing this group from SQL Server logins?
We are trying to tighten up security and this is one area we want to focus on?
thanks
ADVERTISEMENT
Builtinadministrators
Dec 27, 1999Does anyone know who the builtinadministrators are by default in SQL Server 7 as part of the
system administrators.
BUILTINAdministrators Account
Jul 27, 2000As default, the BUILTINAdministrators account is
created during the installation of SQL Server 7.0.
The default access is to have the account in
the System Administrators server role which gives
them dbo access to each database.
Since I don't want my network administrators to
have sa privleges within SQL but still want them
to be able to access the databases, I've removed
them from the System Administrators server role.
The SQL Server Login Properties window still shows
the account having access into each of the databases
as dbo, however they are unable to view or access
any objects within the databases.
Shouldn't the account still have permissions, just not
as sa? Can someone please explain this to me? I've checked
BOL and several of the reference books I have, but don't
find any detailed information on this account.
Thank you
Toni
Removing BuiltinAdministrators
Mar 20, 2002Hi all,
I am using SQL 2k SP2 on Win 2K Advance server Cluster. My problem is how to remove builtinAdministrators login. Earlier when I tried it was doing failovers from one node to another and not stopping. I was not able to do anything. Any help is appriciated
thanks,
Minesh.
Use Of BUILTINAdministrators Account
May 28, 2002This message is in reference to a previously posted SLQ Server 7 question and answer regarding the BUILTINAdministrators account (dated 11/19/2001)
Original Question: I'm using Mix-Mode Authentication. Can I remove the Builtin/Administrator loggin ID
without cause any harm to my current Login ID user(Windows NT user)? Are will
removing Builtin/Administrator what harm will this cause to my server?
Answer to above: The first thing I do after installing SQL is remove the Builtin/Administrators account for
the SQL Server. Depending on how you set SQL up, this should not affect any NT
users, unless you granted them access to the server through the local Administrators
group. This is not the prefered way of granting access, however. This will give any
administrator on the machine access to all of the data, which you may not want,
depending on the confidentiality of the data.
Situation: (SQL Server using Mixed Mode Authentication).
If the Builtin/Administrators is disabled or deleted, and the server rebooted, SQL Server will be initiated but, the SQL Server Agent won't be.
Signing onto SQL Server as SA will not be able to restart SQL Agent nor will an NT user with administrator capability have any better luck
Question: What specifically in NT and SQL Server does one need to change to get around this situation.
The SQL Server documentation is not very helpful regarding the use of this login.
While attending a SQL 2000 Administrator course, two of my colleagues were told to always delete this account but were not given any reason or explained the consequence of this action.
Removing BUILTINAdministrators
May 1, 2007We need to remove the BUILTINAdministrators from reporting services. I.T. personnel do not want to be able to see restricted reports. We have two department users that have been added as Content Managers and we are running reporting services under a created domain user account that we created and not a system service. I have removed BUILTINAdministrators from the Home folder and when I check, it comes right back. Do I need to deny access to BUILTINAdministrator on SQL Server 2005 itself? I would apprecate any suggestions.
Remove BuiltinAdministrators
Apr 3, 2008Hi all,
After I removed the BuiltinAdministrators Group and changed the SQL Service Account from LocalSystem to my Window account this Openrowset query fail.
select a.*
from openrowset('MSOLAP',
'DATASOURCE=HODB02;Initial Catalog=POS_DM;', 'SELECT {[Measures].[SALE PRICE]} ON COLUMNS,
{[Item_Type].[Description].MEMBERS }ON ROWS
FROM [ONLINE SALES ANALYSIS]' ) as a
OLE DB provider "MSOLAP" for linked server "(null)" returned message "The following system error occurred: No connection could be made because the target machine actively refused it. .".
Is that relate the teh Security Account Delegation?
Deleted The BUILTINAdministrators Group, How Do I Do?
Jan 30, 2008
be not carefully, i deleted the BUILTINAdministrators group, and the 'sa' acount is disabled.
now i can login in use the other acount, but can't assign the roles and alter the login 'sa' to enable, beacause i do not have the premission.
how do i do, pls help me.
BUILTINAdministrators Vs System Administrator
Feb 13, 2007Hello all,
does someone know where to find information regarding what is accesible to a BUILTINAdministrator which is not accesible to a System Administrator?
Somewhere I have read that a System Administrator can not see the "All users' folders (i.e. the collection of "My folder"s for all users of the Report Server) but I have also experienced a behaviour which has surprised me: as a System Administrator with all permissions I cann't even see folders that a BUILTINAdministrator can.
Does it mean that a System Administrator can not really manage all the resources of a Report Server?
Any ideas will be welcomed. Many thanks.
BUILTINAdministrators Not Recognized - RsUnknownUserName
Feb 14, 2007Hello all,
We recently moved our Team Foundation Server from one server to another, of course the reporting services was also included in that move.
On the new server, we are not able to change Reporting Services security parameters anymore, we get this error :
User or group « BUILTINAdministrators » not recognized. (rsUnknownUserName)
The old server was an english windows 2003, the new one a french version, i guess the problem is related. The BUILTINAdministrators group name on the new server is "BUILTINAdministrateurs".
Is there a way to change security params without getting this error ? How can we remove from Reporting Services this reference to BUILDTINAdministrators ? I've tried to modify the table Users directly in ReportServer DB without any success..
Please help !
Alexandre
Remove BUILTINAdministrators From SQL 2005
May 4, 2007We have a server shared by two project teams. To tight the security, I want to remove BUILTINAdministrators off the public and sysadmin server roles. My question: any thing I should pay special attention ? I use LocalSystem to start all SQL Service. I know this is not a very good pratice yet I have no choice as our company network is a mixed of windows and novell, we do not have AD.
View 5 Replies View RelatedEmergency- SA Acct Locked, Cannot Use BUILTINAdministrators
Jul 5, 2007SQL Server 2005, Windows Server 2003:
On our production db, the SA acct has been locked. I realize that I could enable mixed mode and then connect via an administrator -- but we are already running in mixed mode, and our BUILTINAdministrators account has sysadmin permissions turned off.
As it stands, the only user I can connect as does not have permission to modify any of the login info.
What recourse do I have at this point? Can I disable mixed-mode and re-enable it (via registry)? If so, will it reset the SA account or rebuild the BUILTINAdministrators login for me?
Or do I need to contact Microsoft, and if so is there anything they can do?
User BUILTINAdministrators Was Delete. I Can't Use SQL Enterprise Manager. Help Me!
Aug 18, 2003My os:
Window2000 + SQL Server 2000 Enterprise
User BUILTINAdministrators was delete. I can't use SQL Enterprise Manager.
Thank you.
Deny BuiltinAdministrators Access To Report Manager
Apr 22, 2008
I need to remove full admin privs from the builtinadministrator's group in report manager.
I tried removing the builtinadmin role from report manager and SQL Server, I removed it from the Site Settings area and from each individual folder's permissions.
Yet all the members of that group still have full run of the report server...
I even made a new folder that ONLY I am listed as having permissions to, yet they can see that as well...???
Suggestions?
Report Manager Problem: The User Or Group Name 'BUILTINAdministrators' Is Not Recognized. (rsUnknownUserName)
Jun 15, 2006Hello,
I have a big problem with Reporting Services 2005 working on Windows 2003 Server.
RS work as Network service, on subdomain reporting.mydomain with SSL wildcard certificate *.mydomain,
Anonymous access: disabled and basic authentication: enabled
ReportManager and reportServer has defualt virtual folders (/reporting, /reportserver)
My problem is:
1) I can't manage security roles and site settings with report maanger. when I try assign roles to new user or group I get followng error:
"The user or group name 'BUILTINAdministrators' is not recognized. (rsUnknownUserName) Get Online Help"
when i try to execute reports in report manager, parameters controls are not displayed correctly (very simple text boxes) and I can see:
The selected report is not ready for viewing. The report is still being rendered or a report snapshot is not available. (rsReportNotReady)
and I can't see my report in browser (IE 6.0) but only export to PDF, Excel...
other functionality are working fine i.e upload new files, creatign folders....
2) Also my reportserver virtual folder does not work correctly.
When I navigate to mydomain/reportserver I can see content of this virtual folder, than when I navigate to ReportService.soap i can see normal ReportServer view
reporting.mydomain - /Reportserver/
[To Parent Directory]
Montag, 10. April 2006 16:31 <dir> bin
Dienstag, 6. September 2005 01:12 488278 Catalog.sql
Dienstag, 6. September 2005 01:12 14738 CatalogTempDB.sql
Freitag, 21. April 2006 19:45 10555 Copy of rsreportserver.config
Freitag, 14. April 2006 17:29 76 global.asax
Freitag, 15. Juli 2005 01:12 26582 ModelGenerationRules.smgl
Montag, 10. April 2006 16:31 <dir> Pages
Montag, 10. April 2006 16:31 <dir> ReportBuilder
Montag, 13. Juni 2005 14:07 143 ReportExecution2005.asmx
Montag, 13. Juni 2005 14:06 196337 ReportingServices.wsdl
Montag, 13. Juni 2005 14:07 131 ReportService.asmx
Montag, 13. Juni 2005 14:07 131 ReportService.soap
Montag, 13. Juni 2005 14:07 139 ReportService2005.asmx
Dienstag, 13. Juni 2006 20:01 10580 rsreportserver.config
Montag, 13. Juni 2005 14:07 11845 rssrvpolicy.config
Montag, 10. April 2006 16:31 <dir> Styles
Freitag, 17. Juni 2005 01:09 2673 web.config
but me reports are not displayed correctly, I can run reports but top bar with parameters, export and print function are not displayed in correct format.
(simple textboxes, and icons)
reporting.mydomain/ReportServer - /
Microsoft SQL Server Reporting Services Version 9.00.1399.00
I think it is security issue. What schould i do to solve this problems?
Wojtek