Sign in
 
SQL Server Developer Center > SQL Server Forums > SQL Server Security > disable sysadmin
Ask a questionAsk a question
Search Forums:
 

Answerdisable sysadmin

  • Tuesday, November 03, 2009 6:49 AMbuddy 23 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    hi
    is the a way to disable windows account to provision as SQL server system adminstrators. when installing SQL 2008, ie with configurationfile.ini
     

Answers

  • Tuesday, November 03, 2009 7:46 AMLekss Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Hi Buddy,

    I don't think that option is possible. When you select MIXED mode authentication in SQL 2008 installation , the setup asks for one or more windows admin to be added in to sql server also as a admin . Without specifying at least one of the windows admin in here , the setup will not progress.

    May be server can be reconfigured as per your requirement once the SQL is running successfully under a domain account.
    Thanks, Leks
     
  • Friday, November 06, 2009 1:45 AMMichael HotekModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    It isn't possible during installation.  The reason is that you need some way to initially access a SQL Server once it is installed and part of the installation routine actually loads the system databases into SQL Server along with setting some other internal items.  Once the installation is complete, you can remove that access.  But, keep in mind, it is absolutely impossible to keep someone with admin authority to the machine out of a SQL Server.  That is because at the very minimum, the SQL Server service account has to be a member of the sysadmin role.  A Windows administrator has control over the service accounts, so they would always have a route in.
    Mike Hotek BlowFrog Software, Inc. http://www.BlowFrogSoftware.com Affordable database tools for SQL Server professionals
     

All Replies

  • Tuesday, November 03, 2009 7:46 AMLekss Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Hi Buddy,

    I don't think that option is possible. When you select MIXED mode authentication in SQL 2008 installation , the setup asks for one or more windows admin to be added in to sql server also as a admin . Without specifying at least one of the windows admin in here , the setup will not progress.

    May be server can be reconfigured as per your requirement once the SQL is running successfully under a domain account.
    Thanks, Leks
     
  • Friday, November 06, 2009 1:45 AMMichael HotekModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    It isn't possible during installation.  The reason is that you need some way to initially access a SQL Server once it is installed and part of the installation routine actually loads the system databases into SQL Server along with setting some other internal items.  Once the installation is complete, you can remove that access.  But, keep in mind, it is absolutely impossible to keep someone with admin authority to the machine out of a SQL Server.  That is because at the very minimum, the SQL Server service account has to be a member of the sysadmin role.  A Windows administrator has control over the service accounts, so they would always have a route in.
    Mike Hotek BlowFrog Software, Inc. http://www.BlowFrogSoftware.com Affordable database tools for SQL Server professionals