Monday, March 12, 2012

Logins created by default

Besides BUILTIN\Administrators and sa, are there any logins which will be
created by default in SQL Server 2000? It seems that a Windows User (the
user who installs the SQL Server) will be also created automatically.
Does using Windows Authentication or mixed mode affect which logins will be
created automatically?
Thanks."Peter" <Peter@.discussions.microsoft.com> wrote in message
news:C1A65A74-296D-4681-921F-71399767BB6B@.microsoft.com...
> Besides BUILTIN\Administrators and sa, are there any logins which will be
> created by default in SQL Server 2000? It seems that a Windows User (the
> user who installs the SQL Server) will be also created automatically.
Those are the default accounts...

> Does using Windows Authentication or mixed mode affect which logins will
be
> created automatically?
No.
Steve|||Steve,
I understand the sa and BUILTIN\Administrators are default accounts for both
Windows Authentication and Mixed mode.
But how about the Windows User login? It seems that it is created
automatically and it is the Windows User who installs the SQL Server. Is my
understanding correct?
"Steve Thompson" wrote:

> "Peter" <Peter@.discussions.microsoft.com> wrote in message
> news:C1A65A74-296D-4681-921F-71399767BB6B@.microsoft.com...
> Those are the default accounts...
>
> be
> No.
> Steve
>
>|||Not unless that user is a member of the local Administrators Group.
So, any local admin has Windows Auth access to the server by default. It
doesn't matter who ran setup per se.
Local admin privleges are required to install services.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||Hi Kevin,
I'm trying to find out the following:
1. Whether that Windows User login(the one installed the SQL Server) is
always created automatically during installing a SQL Server using Windows
Authentication or not.
Based on my testing in installing SQL Server with Windows Authentication
when I logged onto the domain, the following logins are created automaticall
y:
sa
BUILTIN\Administrators
domain\user - the Windows User who logged onto the domain
2. Can a user who has local administrative permissions log on to the
operating system locally (so he/she is not logged onto the domain) and
install a SQL Server using Windows Authentication? If yes, since the user
only logs on locally, I guess that only sa and BUILTIN\Administrators logins
are created automatically. Am I right?
So, basically I want to know what logins are created automatically in
installing a SQL Server using Windows Authentication when:
1. the user is logged on locally
2. the user is logged onto the domain
Thanks.
"Kevin McDonnell [MSFT]" wrote:

> Not unless that user is a member of the local Administrators Group.
> So, any local admin has Windows Auth access to the server by default. It
> doesn't matter who ran setup per se.
> Local admin privleges are required to install services.
> Thanks,
> Kevin McDonnell
> Microsoft Corporation
> This posting is provided AS IS with no warranties, and confers no rights.
>
>|||I think the confusion may be in that the account specified to start the
services is added to the logins.
If you specify in setup that a local windows account or domain account
should be used to start the services, (MSSQL and SQL Agent)
then this account is added to the logins.
If you selected to start the service with 'localsystem' which I don't
recommend, then only the Builtin\admin and sa account is
added to the logins.
Hope this helps.
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||Hi Kevin,
Yes, I use a domain account to start MSSQL and SQL Agent. I don't remember
seeing any information about this account will be added to logins.
Thanks,
Peter
"Kevin McDonnell [MSFT]" wrote:

> I think the confusion may be in that the account specified to start the
> services is added to the logins.
> If you specify in setup that a local windows account or domain account
> should be used to start the services, (MSSQL and SQL Agent)
> then this account is added to the logins.
> If you selected to start the service with 'localsystem' which I don't
> recommend, then only the Builtin\admin and sa account is
> added to the logins.
> Hope this helps.
> Kevin McDonnell
> Microsoft Corporation
> This posting is provided AS IS with no warranties, and confers no rights.
>
>

No comments:

Post a Comment