Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
DBADave
Constraint Violating Yak Guru
366 Posts |
 Posted - 2004-10-06 : 09:31:26
|
| I have no experience with clustering and need your oppinion on how the Builtin\Administrators group comes into play. I have removed this group from all of our servers due to the security risks it presents. We are now looking into clustering and the consulting company recommends the following, which I have a hard time believing is correct.You should keep BUILTIN\Administrators account in SQL Server System Administrators server role. This group is used by a Cluster service account to communicate to SQL server instances. Is this true?Thanks, Dave |
|
|
surefooted
Posting Yak Master
188 Posts |
Posted - 2004-10-06 : 11:30:44
|
Add the cluster service account to public in master. The cluster account just runs a 'Select @@server' to make sure the server is up and running. It needs nothing else.There is no need to ever keep builtin\administrators on a machine.You need another consulting company.  -JonNow a "Yak Posting Veteran". |
 |
|
|
DBADave
Constraint Violating Yak Guru
366 Posts |
Posted - 2004-10-06 : 11:33:48
|
| Sounds like the cluster service account doesn't even need to be in the local administrators group. Thanks, Dave |
|
|
|
|
|
|
Clustering and Builtin\Administrators