SQL Server 2005 Security:
Hi I have a sitaution where I have domain admins logging on to SQL SErver and automatically accessing SQL Server as syadmin.
Here are the steps I am planning to take to fix this problem!
1. Create a a non administrative domain account called SQLDBA and add it as sysadmin on SQL Server.
2. Make sure the SQL Services are using a special account called SQLServices non administrative domain account with Log on as service rights and added as a sysadmin on sql server.
3. Remove the builtin\administrators from sql server
The way I envision this is anyone who log on with a domain admin acct will need to specially log on to sql server with a restrictive sql login instead of how they use to automatically get logged in.
Are there any pitfalls I am not seeing ? I have reporting services running on the sql server. Its SQL Server 2005 Standard edition. Plz help!
