Systems Engineering and RDBMS

Removing the BUILTIN/Administrators login in SQL Server

Posted by decipherinfosys on March 1, 2008

It is a good security practice to remove the BUILTIN/Administrators login account from the SQL Server logins or atleast remove the sysadmin privileges for that account. If you are planning to remove it, make sure that you do these steps first:

1) Work with your IT team to create a Windows group for the DB team members. This should have all the DBA accounts added to this group.
2) Next thing to do would be to add this group as a login to the instance.
3) And then grant this group the sysadmin rights.
4) You can now remove the BUILTIN/Administrators login.

Also, read this KB article from MSFT on this topic for further details:

http://support.microsoft.com/kb/932881

Sorry, the comment form is closed at this time.

 
%d bloggers like this: