locked
Windows sysadmin access to SQL Server ? RRS feed

  • Question

  • Hello, if Domain\User_a who creates a VM at the Windows OS server level...is that particular domain user able to access SQL Server as a sysadmin role by default after SQL Server was installed by a different Domain\User_b OS level sysadmin?

    Thanks in advance.

    Sunday, December 9, 2018 2:58 AM

All replies

  • Members of the server's local Administrators group do not have access the SQL Server by default. The initial sysadmin role members are provisioned during SQL Server installation.


    Dan Guzman, Data Platform MVP, http://www.dbdelta.com

    Sunday, December 9, 2018 3:33 AM
  • domain\user_a won't be able to access SQL instance by default 

    Thanks, Nithin

    Sunday, December 9, 2018 7:36 AM
  • In addition to the other posts: A local admin on a windows machine can start SQL Server in single user mode and then login using windows authentication as a sysadmin. Just to be aware of that "backdoor".

    Tibor Karaszi, SQL Server MVP (Web Blog)

    Sunday, December 9, 2018 2:57 PM
  • Interesting. Thanks all for the replies. So can the creator of the VM create a local user with administrator rights & login as full permissions into SQL Server? (Where as SQL Server was installed by a different user.)
    Sunday, December 9, 2018 8:02 PM
  • Interesting. Thanks all for the replies. So can the creator of the VM create a local user with administrator rights & login as full permissions into SQL Server? (Where as SQL Server was installed by a different user.)

    Yes, using the back door that Tibor described. But what is you real concern? That is, what is the underlying reason you are asking these questions?                                                                

    Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se

    Sunday, December 9, 2018 8:56 PM