SQL server administrators group

tags:

sql-server

views:

197

answers:

+1 Q:

SQL server administrators group

Hi to all,

I have a service that runs under as specific windows user. That user is part of the adminstrators group.

In the SQL server database, I can see in the security pane : Builtin\Adminstrators.

The connections string contains Integrated Security = SSPI (no username or password).

Is the fact that I can connect to the database a result of my user being in the administrators group which corresponds to Builtin\Adminstrators in sql server?

JD.

+3 A:

Yes, yes it is.

SQL Server uses Windows Authentication (you can enable native SQL logins, as well, though), and that includes groups. If you add a group and give that group permissions (in this case, Builtin\Administrators), then every member of that group has access.

In SQL Server 2000 and 2005, Builtin\Administrators were default server administrators. In 2008, that's no longer the case, but many people go that route out of habit, anyway.

Eric 2009-08-04 18:12:46

Cheers Eric. I had another developer shoot me down for even considering it. He insisted I need to have the user mapped in sql server.

JD 2009-08-04 18:23:12

@JD: Don't talk to developers about SQL Server security. Talk to DBAs. Just be careful when you do--you may end up losing an afternoon with that conversation.

Eric 2009-08-04 18:27:10

@Eric: Will do, I need to post another question, so I might as well ask now (as I am on the train) : What is the difference between Integrated Security = True and Integrated Security = SSPI. I have two apps and each one works only with one of the strings each.

JD 2009-08-04 18:31:55

@JD: Best to post it as another question. I only know of `Trusted_Connection = True` and `Integrated Security = SSPI` as syntax differences, so there may be somebody that can provide a much more in depth answer for you.

Eric 2009-08-04 19:18:17

ansaurus

tags:

views:

answers:

SQL server administrators group

related questions