Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 SQL server administrative privileges account

Author  Topic 

kiranbvsn
Starting Member

11 Posts

Posted - 2011-09-01 : 11:05:28
hi all,

i've created an sqladmin group in my domain controller which consists of 5 users. My problem is what privileges shall i've to assign to this group so that i can restrict them without having full administrative privileges advantage, but sufficient enough to do any sql server task incluing xp_sendmail or adhoc queries

please specify the privileges that i've to assign,

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2011-09-01 : 11:19:07
You can grant the group execute permissions on xp_sendmail (should be using database mail now), and grant db_datareader on each db you want them to be able to read from.
Go to Top of Page

kiranbvsn
Starting Member

11 Posts

Posted - 2011-09-01 : 13:31:15
No i am asking about the permissions or privileges that i've to configure in windows operating system to create the dedicated sqladmin group for service acccounts to run, not on the sql server roles and permissions
Go to Top of Page

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2011-09-01 : 14:17:28
Ahhh, have a look here then.
Go to Top of Page

kiranbvsn
Starting Member

11 Posts

Posted - 2011-09-02 : 01:19:54
that means in real we cannot add sqladmin group directly to builtin administrator? cause i am working on production server, so need some help
Go to Top of Page

kiranbvsn
Starting Member

11 Posts

Posted - 2011-09-02 : 15:24:25
hi russell,

Yesterday i've added a sqladmins group in my windows 2003 domain controller, in which i've added 5 users as sql dba admins,
and then on my windows 2003 member server where sql server 2005 is installed, i created a sql server login with the sqladmins group and assigned sysadmin server role,

now when i am trying to connect using one of the 5 users (say sqladmin1) login, i am getting the above error
login failed or valid login but server access failure.
when i've tried to connect using via sqladmin1 individual login , i was successful,

can u please help me in this regard, btw the exact message even in the error log has no extra information.
Go to Top of Page

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2011-09-06 : 09:36:40
In SQL Server, did you create a SQL login, or a Windows login for this group? Needs to be a windows login.
Go to Top of Page
   

- Advertisement -