They tried that with us but we won our battle because we started calling
the server admins 10 times a day to have services stopped and restarted,
to ask questions about file locations, look at logs, etc. In short we
drove them crazy.
Our compromise was we have created a second admin account for each DBA.
That is the account that is used for server admin tasks, never our
regular domain accounts.
We created a SQL admin NT group and put the SQL service accounts in it
plus our admin accounts. All privileges are granted to the group and
never to the specific user id. Then put that group in the local admin
of all the SQL servers. If a DBA leaves and a new one comes in we just
have to swap the accounts in the NT group and all permissions remain the
same.
Thanks,
Ralph W. Davis
*********************************************************
*** CORPORATE DBA group - Houston ***
*********************************************************
-----Original Message-----
From: Adam Blumenfeld
[mailto:mssqldba-ezmlmshield-x94707858.[Email address protected]
Sent: Friday, September 28, 2007 1:05 PM
To: LazyDBA Discussion
Subject: RE: DBA need to have Full rights on Server and SQL server....
I, also, recently left a company where I was 'the guy', and had full
rights to everything. I've moved to a bigger company, and security is
much tighter, and I now have access as you describe.
I am having a lot of difficulty doing tasks that used to take seconds.
Like monitoring performance, seeing where specific files are located.
Looking at logs. Lot's of stuff...
I'm curious about how you will work this out. I am battling every day.
Adam
-----Original Message-----
From: Gord Debiasi
[mailto:mssqldba-ezmlmshield-x8563065.[Email address protected]
Sent: Friday, September 28, 2007 10:53 AM
To: LazyDBA Discussion
Subject: RE: DBA need to have Full rights on Server and SQL server....
Tell them to take the access away from the server, but just share the
C:.....
Bingo same thing.
Crazy company.
-----Original Message-----
From: Perstin Oksana
[mailto:mssqldba-ezmlmshield-x64556217.[Email address protected]
Sent: Friday, September 28, 2007 1:44 PM
To: LazyDBA Discussion
Subject: DBA need to have Full rights on Server and SQL server....
Hi experts,
I want to pass this to get your opinion on this.
As a DBA I have to have full rights on Server and SQL Server. This rule
was with all other companies that I worked with.
It is simply necessary for any troubleshooting purposes ( including
performance counters and any Operating system logs etc..)
Now our management team looking to tight security in our company and
advice us that they will take out DBAs permission from the server and
leave full permissions only on SQL server. To me this will make so many
limitations to complete my job as far as any problems that may come with
SQL server. I think this just not acceptable.
Please let me know your opinions and experience with similar issues if
you ever had that will help me to prove this point of view.
Thank you
---------------------------------------------------------------------
TO REPLY TO EVERYBODY , PLEASE CLICK REPLY-ALL, NOT JUST REPLY To post a
dba job: http://jobs.lazydba.com To subscribe : http://www.LazyDBA.com
To unsubscribe: http://www.lazydba.com/unsubscribe.html
---------------------------------------------------------------------
TO REPLY TO EVERYBODY , PLEASE CLICK REPLY-ALL, NOT JUST REPLY
To post a dba job: http://jobs.lazydba.com
To subscribe : http://www.LazyDBA.com
To unsubscribe: http://www.lazydba.com/unsubscribe.html
########################################################################
#############
Warning:
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to which it is
addressed. If you are not the named addressee any review, dissemination,
distribution or duplication of this e-mail is strictly prohibited. If
you have received this email in error, please let us know by e-mail and
delete it from your system. Please note that any personal views or
opinions presented in this email are solely those of the author and do
not necessarily represent those of the company.
Thank You.
########################################################################
#############
---------------------------------------------------------------------
TO REPLY TO EVERYBODY , PLEASE CLICK REPLY-ALL, NOT JUST REPLY
To post a dba job: http://jobs.lazydba.com
To subscribe : http://www.LazyDBA.com
To unsubscribe: http://www.lazydba.com/unsubscribe.html
****************************************************************
Confidentiality Note: The information contained in this
message, and any attachments, may contain confidential
and/or privileged material. It is intended solely for the
person(s) or entity to which it is addressed. Any review,
retransmission, dissemination, or taking of any action in
reliance upon this information by persons or entities other
than the intended recipient(s) is prohibited. If you received
this in error, please contact the sender and delete the
material from any computer.
****************************************************************
MS Sql Server LazyDBA home page