sadie519590


Hi,

Re: SQL Server 2005

We have defined a local administrator to be the SQL Server and SQL Server Agent services user, and is also the job step owner for some SSIS packages I am running.

My question is, isn't by default a local administrator ALSO granted sysadmin in SQL Server According to this link, it seems to imply this:

http://msdn2.microsoft.com/en-us/library/ms143504.aspx

However, I am having some permissions problems with the local adminstrator account (i.e. SQL Server agent account) when it runs the job. The error is that it doesn't have execute permissions on sp_dts_addlogentry.

How can this be, if it's granted sysadmin

Thanks




Re: Service accounts, local admin, and sysadmin question!

Vidhya Sagar


Check whether Local Administartor has SA privilege in SQL level. Also pls check the link http://www.sqlservercentral.com/Forums/Topic294238-148-1.aspx









Re: Service accounts, local admin, and sysadmin question!

Madhu K Nair

check whether BUILTIN\Administrators group is added to sql server or not. If its added then all the User in Local Administrator group will have SA privilege. If you have removed this group then you need add the windows user to which you are mentioning to SQL Server and then you need to give permission explicitly... otherwise though its Local Admin but it will not have SA permission on SQL Server.

Refer

http://www.mssqltips.com/tip.asp tip=1017

Madhu







Re: Service accounts, local admin, and sysadmin question!

mailMaheshGupta

IS this got resolved or not

If you still have any issue. Please let us know, so that can reply to you accordingly.

Mahesh
mailMaheshGupta@yahoo.com






Re: Service accounts, local admin, and sysadmin question!

Madhu K Nair

whether it resolved or not ...pse post your solution if its not already mentioned in the previous posts... .... so that it will be helpful for others...

Madhu




Re: Service accounts, local admin, and sysadmin question!

sadie

Yes, there is a BUILTIN\Administrators login on the server, with sysadmin privs. There is also a separate login for the SQL Server agent local administrator account.

Perhaps this is the problem, the fact that the administrator account has its own login AND is part of the BUILTIN\Administrators group

Because the separate login does not have sysadmin privs checked off. I think this separate login got added by accident when I scripted all the logins from a 2000 box to the 2005 server, and even though it in 2000 it is clear it is a login via group membership, the script added it like a separate login.

Q. I suppose it would be safe to remove this login, yes

Thanks