Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Administration (2000)
 Domain Admin and DataReader

Author  Topic 

dewacorp.alliances

452 Posts

Posted - 2007-07-19 : 17:51:02
Hi all

I have a domain user that basically is a member of Domain Admin. Is there any way that user sets as DATAREADER? I don't think SQL2000 can handle this ...can't it? Once you set as DOMAIN ADMIN, the user will have a full admin right on the box.

Thanks

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2007-07-19 : 17:58:00
You just need to remove the BUILTIN\Administrators group, then local admins (don't worry about domain admins as it's the same in this case) won't have sysadmin. You can then assign them limited privileges.

Tara Kizer
http://weblogs.sqlteam.com/tarad/
Go to Top of Page
   

- Advertisement -