I know that we need administrative rights to a window box during
installation and configuration.
After cutover to production, is it possible for the DBA to survive if
administrative rights are revoked?
What daily/often-run tasks will be affected?

Thanks for any suggestion.

PS (Our system admin has taken away admin rights from us, so far, we
are able to identify 10 areas, but all of them have workaround/fixes
of some sort).

On 23 May 2007 09:36:14 -0700, Anthony <akkha1234 (AT) gmail (DOT) com> wrote:

Yes, it is possible, provided your local windows account is in the
local ora_<sid>_dba group (sid being optional), or you have set up a
password file and granted any Oracle account sysdba and/or sysoper
privilege.

Obviously, this is described in the Windows specific documentation.

--

Sybrand Bakker
Senior Oracle DBA

I did go through the windows installation and platform guide briefly.
It mostly covers the initial installation and configuration part and
did not mention about daily operation. We already setup ORA_DBA group
for example.

Just to throw in a few ideas, when we were revoked system admin, we
can no longer get to scheduled tasks, we can not get to the oracle
database files and oracle dump files. A vbs script which extracts
event log breaks down etc.
Things like this we deal with on a daily basis. I hope some suggestion
from real life experience.

I did go through the windows installation and platform guide briefly.
It mostly covers the initial installation and configuration part and
did not mention about daily operation. We already setup ORA_DBA group
for example.

Just to throw in a few ideas, when we were revoked system admin, we
can no longer get to scheduled tasks, we can not get to the oracle
database files and oracle dump files. A vbs script which extracts
event log breaks down etc.
Things like this we deal with on a daily basis. I hope some suggestion
from real life experience.

I did go through the windows installation and platform guide briefly.
It mostly covers the initial installation and configuration part and
did not mention about daily operation. We already setup ORA_DBA group
for example.

Just to throw in a few ideas, when we were revoked system admin, we
can no longer get to scheduled tasks, we can not get to the oracle
database files and oracle dump files. A vbs script which extracts
event log breaks down etc.
Things like this we deal with on a daily basis. I hope some suggestion
from real life experience.

On 23 May 2007 11:01:00 -0700, Anthony <akkha1234 (AT) gmail (DOT) com> wrote:

I don't think your issue has much to do with Oracle. Your issue has
everything to do with authority.
Why would a non sys-admin need to fiddle around with scheduled tasks
and parse the event log?
Why would one need to have access to the Oracle database files?
Apparently you don't use any tool Oracle provides to administer the
database, but instead your sysadmin assumes you have seized control of
the system (which is partly correct) and he doesn't like that.
I must say I agree: either each of you have their own responsibility,
or you take over all of the system, and you can turn it into whatever
mess you prefer.

--
Sybrand Bakker
Senior Oracle DBA

Obviously, we have different job requirements of DBA..

For me, I look into the event log to look for oracle related event
(please read 6-6 of Oracle Documentation Platform Guide 10gr2 for
Microsoft Windows (32Bit) B14304-05).

I also sometimes want to check the database files, examining the
actual physical sizes and/or timestamps as reported by the window
explorer. I also need to check oracle alert log and sometimes oracle
trace files for performance tuning. I also schedule task which I do
not think oracle job is the best tools. All of this I cannot do now
when admin rights are taken away.

How about you?

On May 23, 11:43 am, sybra... (AT) hccnet (DOT) nl wrote:
Obviously, we have different job requirements of DBA..

For me, I look into the event log to look for oracle related event
(please read 6-6 of Oracle Documentation Platform Guide 10gr2 for
Microsoft Windows (32Bit) B14304-05).

I also sometimes want to check the database files, examining the
actual physical sizes and/or timestamps as reported by the window
explorer. I also need to check oracle alert log and sometimes oracle
trace files for performance tuning. I also schedule task which I do
not think oracle job is the best tools. All of this I cannot do now
when admin rights are taken away.

How about you?

Interesting. We probably have different job requirements and maybe
even definition of DBA.

I go to the event log to retrieve any oracle-related events (Please
refer to page6-6 of Oracle Documentation Platform Guide for Windows
(32-bit)). I need to check the disk and the filesizes/timestamps of my
database files time and again. At least to assure me that there is
enough disk space. I also need to get to oracle alert log every day
and sometimes oracle trace log when doing performance tuning. I guess
ensuring the database running smoothly is part of duties of DBAs.

I schedule tasks. I do not think Oracle jobs can do everything I need
efficiently. Jobs like export, extraction of data to another system
etc., running sql*report (not sql plus).

I cannot do any of this once administrative rights are revoked on a
windows platform without the SA "messing" around the system.

How about you? Do you need to do any of them? If not, what do you as
an DBA?

On May 23, 2:16 pm, Anthony <akkha1... (AT) gmail (DOT) com> wrote:

http://www.microsoft.com/technet/sec...g/default.mspx
Take a look at local or domain security policies. Also, your atomic
file permissions are settable on many levels. You have to grant
access rights to the event logs and and scheduler.

Another good link with answers:
http://www.petefinnigan.com/orasec.htm

http://x220.minasi.com/forum/
If it's windows, ask minasi.