dbTalk Databases Forums  

RE: Removing builtin/admin group in sql2k cluster

microsoft.public.sqlserver.clustering microsoft.public.sqlserver.clustering


Discuss RE: Removing builtin/admin group in sql2k cluster in the microsoft.public.sqlserver.clustering forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Cindy Gross
 
Posts: n/a

Default RE: Removing builtin/admin group in sql2k cluster - 07-03-2003 , 05:09 PM






291255 BUG: IsAlive Check Does Not Run Under the Context of the
http://support.microsoft.com/?id=291255

"service account that the cluster service runs under can log into SQL Server for the IsAlive check. "

263712 INF: How to Impede Windows NT Administrators from Administering a
http://support.microsoft.com/?id=263712

"1. Explicitly add the account that is being used for the Cluster Service as a SQL Server login. You must give this login the System
Administrator role. If full-text search is to be used on the cluster, you must add the [NT Authority\System] account to the server sysadmin
group. For example:

Grant [NT Authority\System] a logon to SQL Server:
EXEC sp_grantlogin [NT Authority\System]
Add that account to the sysadmins role:
EXEC sp_addsrvrolemember @loginame = [NT Authority\System]
, @rolename = 'sysadmin'

2. Remove the "BUILTIN\Administrators" login from SQL Server after you
install the virtual server."


Cindy Gross, MCDBA, MCSE
http://cindygross.tripod.com
This posting is provided "AS IS" with no warranties, and confers no rights.


Reply With Quote
  #2  
Old   
Jp
 
Posts: n/a

Default RE: Removing builtin/admin group in sql2k cluster - 07-07-2003 , 11:09 AM






Thanks Cindy,
Any specific reason why does cluster service account
requires sysadmin rights on sql server2000.We have cluster
sql2000 servers running with just login for cluster
service account.Any drawback of using cluster service
account w/o sysadmin righs?We have already removed
builtin/Admin group from sql server.Also we are not using
FullText search.
Thanks Again.
--Jp
Quote:
-----Original Message-----
291255 BUG: IsAlive Check Does Not Run Under the Context
of the
http://support.microsoft.com/?id=291255

"service account that the cluster service runs under can
log into SQL Server for the IsAlive check. "

263712 INF: How to Impede Windows NT Administrators from
Administering a
http://support.microsoft.com/?id=263712

"1. Explicitly add the account that is being used for the
Cluster Service as a SQL Server login. You must give this
login the System
Quote:
Administrator role. If full-text search is to be used on
the cluster, you must add the [NT Authority\System]
account to the server sysadmin
Quote:
group. For example:

Grant [NT Authority\System] a logon to SQL
Server:
EXEC sp_grantlogin [NT Authority\System]
Add that account to the sysadmins role:
EXEC sp_addsrvrolemember @loginame = [NT
Authority\System]
, @rolename = 'sysadmin'

2. Remove the "BUILTIN\Administrators" login from SQL
Server after you
install the virtual server."


Cindy Gross, MCDBA, MCSE
http://cindygross.tripod.com
This posting is provided "AS IS" with no warranties, and
confers no rights.

.


Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.