locked
how to deny permission of the user(sql login) not to drop any other login RRS feed

  • Question

  • Hi I would like to deny permission of the login(sql login) not to drop any other login

    i am using this command 

    deny drop login to [login]

    error is incorrect syntax near 'drop'

    and same error to

    deny drop database to [login]

    please help me, in how to overcome this error. Thanks in advance


    • Edited by siddhardha vadella Friday, October 2, 2015 4:26 PM
    • Changed type Olaf HelperMVP Monday, October 5, 2015 7:58 AM More a question rather then a discussion
    • Moved by Olaf HelperMVP Monday, October 5, 2015 7:58 AM Moved from "Database Engine" to a more related forum
    Friday, October 2, 2015 4:18 PM

Answers

  • You can't do this.  Do yourself a favor and start learning how to diagnose your own problems.  Go to Books Online and read the documentation for drop login.  You will see that this requires the alter login permission - there is no specific drop permission.  So you cannot deny this permission for only drop or for only a specific login. 

    You might try a DDL trigger - this is rather advanced functionality that will require significant expertise. 

    Friday, October 2, 2015 5:24 PM