| Author |
Topic |
|
ravilobo
Master Smack Fu Yak Hacker
1184 Posts |
 Posted - 2008-08-19 : 16:42:03
|
| What is the difference between - [BUILTIN\Administrators] and [NT AUTHORITY\SYSTEM]. Can I disable them?------------------------I think, therefore I am - Rene Descartes |
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
|
|
ravilobo
Master Smack Fu Yak Hacker
1184 Posts |
Posted - 2008-08-19 : 16:48:47
|
| First one looks like the admins on the box. Second one looks like it has been created by sql server. Both seems to have high privileges. ------------------------I think, therefore I am - Rene Descartes |
 |
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2008-08-19 : 16:51:04
|
| My point is that you can easily find out your answer by googling for it. You've got over 1k posts now. If you've got a question about what your search turned up, then ask a way!Tara KizerMicrosoft MVP for Windows Server System - SQL Serverhttp://weblogs.sqlteam.com/tarad/Subscribe to my blog |
|
|
|
ravilobo
Master Smack Fu Yak Hacker
1184 Posts |
Posted - 2008-08-19 : 17:00:26
|
| I didn't find the difference between that two in google, thats reson for the post.------------------------I think, therefore I am - Rene Descartes |
|
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
Posted - 2008-08-19 : 17:08:03
|
| NT AUTHORITY\SYSTEM is the local system account.BUILTIN\Administrators is the fixed server role that gives local admins permissions. Don't remove the role, rather just remove sysadmin if you don't want your server guys to have sa.Tara KizerMicrosoft MVP for Windows Server System - SQL Serverhttp://weblogs.sqlteam.com/tarad/Subscribe to my blog |
|
|
|
rmiao
Master Smack Fu Yak Hacker
7266 Posts |
Posted - 2008-08-19 : 23:42:14
|
| >> Second one looks like it has been created by sql server. No,it's not. |
|
|
|
ravilobo
Master Smack Fu Yak Hacker
1184 Posts |
Posted - 2008-08-20 : 13:15:18
|
quote:
Originally posted by tkizerBUILTIN\Administrators is the fixed server role ...
Are you sure about this? BOL doesn't list this account in fixed server roles. Somemore things I found, Local service account - NT AUTHORITY\LOCAL SERVICELocal n/w service account - NT AUTHORITY\NETWORK SERVICELocal system account - NT AUTHORITY\SYSTEMIt looks like, we can start SQL services under these accounts. Where as BUILTIN\Administrators are the admins on the box. ------------------------I think, therefore I am - Rene Descartes |
|
|
|
tkizer
Almighty SQL Goddess
38200 Posts |
|
|
ravilobo
Master Smack Fu Yak Hacker
1184 Posts |
Posted - 2008-08-20 : 13:27:18
|
| Thank you Tara.------------------------I think, therefore I am - Rene Descartes |
|
|
|
|
BUILTIN\Administrators VS NT AUTHORITY\SYSTEM