does someone know where to find information regarding what is accesible to a BUILTINAdministrator which is not accesible to a System Administrator?
Somewhere I have read that a System Administrator can not see the "All users' folders (i.e. the collection of "My folder"s for all users of the Report Server) but I have also experienced a behaviour which has surprised me: as a System Administrator with all permissions I cann't even see folders that a BUILTINAdministrator can.
Does it mean that a System Administrator can not really manage all the resources of a Report Server?
I have a stored procedure which sets the value of a variable (@owner_logon_name, type sysname) to sa. It then calls sp_add_job in the msdb database, which in turn calls numerous other stored procedures. The ASP page I post down to the server is coming back with an internal server error and the log file shows the following message:
"Only a system administrator can reassign ownership of a job."
Even though the login name was set to sa, it seems to be using another role.
We recently downloaded and installed SQL Express as it was a required program for our new database management software. When trying to install my database management software I was asked to Login to the SQL server. I entered the SQLEXPRESS server, however, I do not have the SA password. When SQL Express installed it did not ask for a password only for a user name and company. I am running Windows Small Business Server with the Administrator and no password. We did not assign a password to the Administrator account yet.
I have tried to leave the password blank using the login SA and I get error message 28000 Login failed for user. The user is not associated with a trusted SQL Server Connection.
Is there a default password for SA? Or in the alternative, how do I create a user or associate an exising Windows user with a trusted SQL server connection?
I posted this topic and got not response, but I'm pretty desperate so I'll try one more time.
I'm a programmer at a small company but for the past year I've also been relagated to SysAdmin (fun, fun, fun). We less than 25 users (usually no more than 10-15 at one time). We run NT server on a P133, 64MB RAM, 3.5MB & 2.5MB SCUSI hard drives. We run SQL Server on dual P133's, 98MB RAM, 4MB & 2MB SCUSI hard drives. Our systems are pretty junky, they were bought at Microcenter a couple of years ago and some other machines we had bought about the same time have begun dying left and right. Our Server is very slow and we're afraid it's going to poop out on us soon.
I've been put in charge of taking care of this. "Get us a new server, and don't spend too much money." Being a programmer, not and administrator, I have a few questions:
1. Can I buy 1 good server to replace these two? That would mean running our NT File Server and our SQL Server (on NT of course) on the same box. Is that bad or can I do that? The only thing the NT Server is used for is file sharing (mostly images). No applications, no exchange (although maybe in the future), no internet. 2. If yes, should I go with a really fast desktop with a few ATA/66 drives, a smoking chip, tons of memory. Or, should I get a true server with SCUSI drives, ECC memory, RAID capable and all that. Essentially is it better to get a smoking desktop or a lower end/entry level server? 3. I don't quite understand RAID, do I need it? If so, what is it? We need to backup or data somehow. 4. Anything else you think I'll need? Or, could some list some minimum specs? 5. How much should this cost me?
Our main concern is the SQL Server running fast enough. We have a custom Accounting/Order/Inventory system (Access97-front/SQL-Back end ). The database is about 200MB and growing and the largest table has about 100,000 records and we anticipate about 20,000 records a year in that table. We also store tons of images (art company) on our file server and we would like to link our SQL inventory records to those image files.
I'm really kind of in over my head with the administration but the pressure is on. They want me to do this instead of outsourcing and they want to keep in the <=$3500 range (Server & Backup System). Any help or advice of any kind would be greatly appreciated.
I am using windows 8 and I have only one user in laptop. While installing SQL 2014, I am getting an error (Missing System Administrator). Under SQL Server Agent and SQL Server Database I have select the system user and gave the password but still I am getting the error.
I have inherited a sql server and no one knows the SA password. Â I cannot login with windows authentication even if the account is administrator of the machine.
Can any of you tell me how to create a login in SQL Server 6.5 with System Administrator privileges, like we can do with SQL 7 or SQL 2000 ? I don't want to use the sa login.
I represent a software development house and we have developed a client server system based on SQL Server. Most of our customers have already purchased Enterprise License of SQL Server, therefore they own the SA Login and Password. We are bound to attach our Database with their Server on their machine.
My question is how can we stop a System Administrator of SQL Server to view our Database Structure, Queries, Data installed on their SQL Server on their machine.
Our database structure is a trade secret and we cant reveal the structure to the client.
please answer this question by email to me at farhandotcom@gmail.com
We are trying to set up SQLAgent Proxy account. If the SQLServer service id is a domain admin, do we still have to add it to the local administrators group?
Please help! I am new in SQL Server 2000 Administration. My manager had ask me to manage a SQL Server, but Windows Adminstrator refuse to give me Local Admin rights. I only have sa account to login to databases. I don't know any excuses or reasons to give to Windows Adminstrator so that he can give me the local admin rights. If any one have this answer, please help. Thank you.
Hi, Are there any implications for removing this group from SQL Server logins? We are trying to tighten up security and this is one area we want to focus on?
As default, the BUILTINAdministrators account is created during the installation of SQL Server 7.0. The default access is to have the account in the System Administrators server role which gives them dbo access to each database.
Since I don't want my network administrators to have sa privleges within SQL but still want them to be able to access the databases, I've removed them from the System Administrators server role. The SQL Server Login Properties window still shows the account having access into each of the databases as dbo, however they are unable to view or access any objects within the databases.
Shouldn't the account still have permissions, just not as sa? Can someone please explain this to me? I've checked BOL and several of the reference books I have, but don't find any detailed information on this account.
I am using SQL 2k SP2 on Win 2K Advance server Cluster. My problem is how to remove builtinAdministrators login. Earlier when I tried it was doing failovers from one node to another and not stopping. I was not able to do anything. Any help is appriciated
This message is in reference to a previously posted SLQ Server 7 question and answer regarding the BUILTINAdministrators account (dated 11/19/2001)
Original Question: I'm using Mix-Mode Authentication. Can I remove the Builtin/Administrator loggin ID without cause any harm to my current Login ID user(Windows NT user)? Are will removing Builtin/Administrator what harm will this cause to my server?
Answer to above: The first thing I do after installing SQL is remove the Builtin/Administrators account for the SQL Server. Depending on how you set SQL up, this should not affect any NT users, unless you granted them access to the server through the local Administrators group. This is not the prefered way of granting access, however. This will give any administrator on the machine access to all of the data, which you may not want, depending on the confidentiality of the data.
Situation: (SQL Server using Mixed Mode Authentication). If the Builtin/Administrators is disabled or deleted, and the server rebooted, SQL Server will be initiated but, the SQL Server Agent won't be. Signing onto SQL Server as SA will not be able to restart SQL Agent nor will an NT user with administrator capability have any better luck
Question: What specifically in NT and SQL Server does one need to change to get around this situation. The SQL Server documentation is not very helpful regarding the use of this login.
While attending a SQL 2000 Administrator course, two of my colleagues were told to always delete this account but were not given any reason or explained the consequence of this action.
We need to remove the BUILTINAdministrators from reporting services. I.T. personnel do not want to be able to see restricted reports. We have two department users that have been added as Content Managers and we are running reporting services under a created domain user account that we created and not a system service. I have removed BUILTINAdministrators from the Home folder and when I check, it comes right back. Do I need to deny access to BUILTINAdministrator on SQL Server 2005 itself? I would apprecate any suggestions.
After I removed the BuiltinAdministrators Group and changed the SQL Service Account from LocalSystem to my Window account this Openrowset query fail.
select a.* from openrowset('MSOLAP', 'DATASOURCE=HODB02;Initial Catalog=POS_DM;', 'SELECT {[Measures].[SALE PRICE]} ON COLUMNS, {[Item_Type].[Description].MEMBERS }ON ROWS FROM [ONLINE SALES ANALYSIS]' ) as a
OLE DB provider "MSOLAP" for linked server "(null)" returned message "The following system error occurred: No connection could be made because the target machine actively refused it. .".
Is that relate the teh Security Account Delegation?
We recently moved our Team Foundation Server from one server to another, of course the reporting services was also included in that move.
On the new server, we are not able to change Reporting Services security parameters anymore, we get this error : User or group « BUILTINAdministrators » not recognized. (rsUnknownUserName)
The old server was an english windows 2003, the new one a french version, i guess the problem is related. The BUILTINAdministrators group name on the new server is "BUILTINAdministrateurs".
Is there a way to change security params without getting this error ? How can we remove from Reporting Services this reference to BUILDTINAdministrators ? I've tried to modify the table Users directly in ReportServer DB without any success..
We have a server shared by two project teams. To tight the security, I want to remove BUILTINAdministrators off the public and sysadmin server roles. My question: any thing I should pay special attention ? I use LocalSystem to start all SQL Service. I know this is not a very good pratice yet I have no choice as our company network is a mixed of windows and novell, we do not have AD.
SQL Server 2005, Windows Server 2003: On our production db, the SA acct has been locked. I realize that I could enable mixed mode and then connect via an administrator -- but we are already running in mixed mode, and our BUILTINAdministrators account has sysadmin permissions turned off.
As it stands, the only user I can connect as does not have permission to modify any of the login info.
What recourse do I have at this point? Can I disable mixed-mode and re-enable it (via registry)? If so, will it reset the SA account or rebuild the BUILTINAdministrators login for me?
Or do I need to contact Microsoft, and if so is there anything they can do?
I need to remove full admin privs from the builtinadministrator's group in report manager.
I tried removing the builtinadmin role from report manager and SQL Server, I removed it from the Site Settings area and from each individual folder's permissions.
Yet all the members of that group still have full run of the report server...
I even made a new folder that ONLY I am listed as having permissions to, yet they can see that as well...???
I have a big problem with Reporting Services 2005 working on Windows 2003 Server. RS work as Network service, on subdomain reporting.mydomain with SSL wildcard certificate *.mydomain, Anonymous access: disabled and basic authentication: enabled ReportManager and reportServer has defualt virtual folders (/reporting, /reportserver)
My problem is: 1) I can't manage security roles and site settings with report maanger. when I try assign roles to new user or group I get followng error:
"The user or group name 'BUILTINAdministrators' is not recognized. (rsUnknownUserName) Get Online Help" when i try to execute reports in report manager, parameters controls are not displayed correctly (very simple text boxes) and I can see: The selected report is not ready for viewing. The report is still being rendered or a report snapshot is not available. (rsReportNotReady)
and I can't see my report in browser (IE 6.0) but only export to PDF, Excel...
other functionality are working fine i.e upload new files, creatign folders....
2) Also my reportserver virtual folder does not work correctly. When I navigate to mydomain/reportserver I can see content of this virtual folder, than when I navigate to ReportService.soap i can see normal ReportServer view
reporting.mydomain - /Reportserver/
[To Parent Directory]
Montag, 10. April 2006 16:31 <dir> bin Dienstag, 6. September 2005 01:12 488278 Catalog.sql Dienstag, 6. September 2005 01:12 14738 CatalogTempDB.sql Freitag, 21. April 2006 19:45 10555 Copy of rsreportserver.config Freitag, 14. April 2006 17:29 76 global.asax Freitag, 15. Juli 2005 01:12 26582 ModelGenerationRules.smgl Montag, 10. April 2006 16:31 <dir> Pages Montag, 10. April 2006 16:31 <dir> ReportBuilder Montag, 13. Juni 2005 14:07 143 ReportExecution2005.asmx Montag, 13. Juni 2005 14:06 196337 ReportingServices.wsdl Montag, 13. Juni 2005 14:07 131 ReportService.asmx Montag, 13. Juni 2005 14:07 131 ReportService.soap Montag, 13. Juni 2005 14:07 139 ReportService2005.asmx Dienstag, 13. Juni 2006 20:01 10580 rsreportserver.config Montag, 13. Juni 2005 14:07 11845 rssrvpolicy.config Montag, 10. April 2006 16:31 <dir> Styles Freitag, 17. Juni 2005 01:09 2673 web.config
but me reports are not displayed correctly, I can run reports but top bar with parameters, export and print function are not displayed in correct format. (simple textboxes, and icons)
reporting.mydomain/ReportServer - /
Microsoft SQL Server Reporting Services Version 9.00.1399.00
I think it is security issue. What schould i do to solve this problems?
I have created a windows library control that accesses a local sql database
I tried the following strings for connecting
Dim connectionString As String = "Data Source=localhostSQLEXPRESS;Initial Catalog=TimeSheet;Trusted_Connection = true"
Dim connectionString As String = "Data Source=localhostSQLEXPRESS;Initial Catalog=TimeSheet;Integrated Security=SSPI"
I am not running the webpage in a virtual directory but in
C:Inetpubwwwrootusercontrol
and I have a simple index.html that tries to read from an sql db but throws
the error
System.Security.SecurityException: Request for the permission of type 'System.Data.SqlClient.SqlClientPermission, System.Data, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed. at System.Security.CodeAccessSecurityEngine.Check(Object demand, StackCrawlMark& stackMark, Boolean isPermSet) at System.Security.PermissionSet.Demand() at System.Data.Common.DbConnectionOptions.DemandPermission() at System.Data.SqlClient.SqlConnection.PermissionDemand() at System.Data.SqlClient.SqlConnectionFactory.PermissionDemand(DbConnection outerConnection) at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection,
etc etc
The action that failed was: Demand The type of the first permission that failed was: System.Data.SqlClient.SqlClientPermission The Zone of the assembly that failed was: Trusted
I looked into the .net config utility but it says unrestricted and I tried adding it to the trusted internet zones in ie options security
I think that a windows form connecting to a sql database running in a webpage should be simple
I am new to sql server. I would like to now how to add somebody as an administrator so that he/she can connect to my instances. what is the easiest way to do it>? thanks....
I'm using Mix-Moded Authentication. Can I remove the Builtin/Administrator loggin ID without cause any harm to my current Login ID user(Windows NT user)? Are will removing Builtin/Administrator what harm will this cause to my server?
First ... want to applaud the creators/managers of this site. I have found almost all the answers I have had. However, got something new.
I am setting up Web Data Administrator from MS on a Windows 2003/IIS6 server connecting to our SQL 2000 boxes. The server has .Net 1.1 SP1. I have set this up on a Windows 2000/IIS5 server and it worked but was slow. It has .Net 1.1 and has been patched to SP1. When I got the new copy setup on IIS6, IE would not work with it but Firefox does. (I love the irony!) Going back to IIS5 copy, it doesn't work now in IE but it does in Firefox. Anyone else seeing this? Any ideas?
I just now installed sqlserver 2005 express. I am connecting to it via oracles 'sqldeveloper' using sourceforge jtds jdbc driver. I can connect to the server but I cannot logon probably because I dont know any user id or password. I can't find any reference to the default uid/password in the server 'help'.
Hello, I use SQL Server 2005 Express and VB.Net for my client server application. From a client machine, if the user is logged on as Windows Administrator, my application connects to the database server just fine. If the client is logged on as a non-administrator, then my app cannot connect. Here is my connection string:
