How to tell if BUILTYIN\Administrators login is needed 1

[jlrsov]

Here is a thorny problem for security:

Is there any way to tell WHO is logging in and using the BUILTIN login and WHO the real members of it are? I run the

exec sp_helplogins BUILTIN\Administrators

script, but it gives back no memebership info at all.How can one investigate beforehand whether deleting the BUILTIN login off the server for security reasons may cause necessary applications logins to be blocked, etc?



Thanks in advance



Jim Ruddy

 

[mutley1]

Brief summary - Anyone who is a member of the local administrator role of the server itself (including groups so you may need to check back to user manager as well!) is going to be a member of the BUILTIN\Administrators.

Check out who they are, who actually needs access and then add them individuallt into SQL Security.

Detailed, check out

http://www.sqlservercentral.com/col...hebuiltinadministratorssomepitfallstoavoi.asp

Rgds,

M.