Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Administration (2000)
 Role

Author  Topic 

RoyalSher
Yak Posting Veteran

95 Posts

Posted - 2003-09-11 : 12:15:11
Hi

I have a dumb question ? What right should a Database Administrator have in the OS - Windows 2000.

Pl. help me with my stupid doubt.

Thanks in advance.

RoyalSher.
*********
The world is the great gymnasium where we come to make ourselves strong.

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2003-09-11 : 12:19:04
DBA accounts should be members of the local administrators group on the SQL Servers. At my last job though, the server admins would not give this to us, so we just circumvented them by using xp_cmdshell which let us do whatever we wanted anyway.

Tara
Go to Top of Page

RoyalSher
Yak Posting Veteran

95 Posts

Posted - 2003-09-11 : 12:20:20
thanks tara.

but if i need to create a directory or generate performance counters, what role shd i be in os level to access the server.



RoyalSher.
*********
The world is the great gymnasium where we come to make ourselves strong.
Go to Top of Page

X002548
Not Just a Number

15586 Posts

Posted - 2003-09-11 : 12:24:23
Not such a dumb question...and I imagine you could ask the other way around...what right should server ops have to the database?

In my shop the duties are split so that server ops can admin the box but don't have access to sql server...



Brett

8-)

SELECT @@POST=NewId()

That's correct! It's an AlphaNumeric!
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2003-09-11 : 12:24:54
For performance counters, I think you could have less than administrative privileges but I don't which policy would give you what you need. To create directories, you need very little privileges. But this is a question for server admins. If you are going to be performing DBA work, then request local administrative privileges. Anything less is going to require creative work arounds.

Tara
Go to Top of Page

X002548
Not Just a Number

15586 Posts

Posted - 2003-09-11 : 12:27:22
quote:
Originally posted by RoyalSher

thanks tara.

but if i need to create a directory or generate performance counters, what role shd i be in os level to access the server.




You can have server ops create a share for you where you can map and do the work...that's how we do it...they want to sheild us from the o/s files...or

master..xp_cmdshell 'md c:\newdrir'

as far as the counters???



Brett

8-)

SELECT @@POST=NewId()

That's correct! It's an AlphaNumeric!
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2003-09-11 : 12:27:25
In my shop, server admins and DBAs have local admin rights, but its the server admins who do the server work. In the SQL Server, both groups have sysadmin rights, but DBAs perform the database work. So even though one group has the power to do some work, it doesn't mean that they are actually going to go beyond their job duties. We trust each other and this leads to a good working environment.

Tara
Go to Top of Page

RoyalSher
Yak Posting Veteran

95 Posts

Posted - 2003-09-11 : 12:32:32
Thanks Tara.

Can I request for Power Users instead of local system administrator ? Will that be fine. Any other suggestions pl.


RoyalSher.
*********
The world is the great gymnasium where we come to make ourselves strong.
Go to Top of Page

tkizer
Almighty SQL Goddess

38200 Posts

Posted - 2003-09-11 : 12:35:24
You will need to look up what privileges Power Users gives. I have had Power Users before and I could not perform certain things. One of them was the ability to terminal service into the SQL Servers.

The account that the MSSQLSERVER service uses to log in with, is it a member of the local admin group? I sure hope so.

Tara
Go to Top of Page
   

- Advertisement -