
February 22nd, 2004, 05:20 PM
|
|
Registered User
|
|
Join Date: Feb 2004
Posts: 1
Time spent in forums: < 1 sec
Reputation Power: 0
|
|
Prevent user login from stopping server
This is probably a basic question for most but it's solution has eluded me so far. I've been searching fordays for a solution but perhaps someone with more experience with sql server could help me out.I am fairly new to db administration and have been trying to learn how to setup remote accounts. Now the problem isthat whenever I create a sql server login and try it out, I can restrict which databases the logins have access to(connecting through enterprise manager) but the user logins can click on the server and they have the option toStop or pause the server. My understanding from looking this problem up is that only the serveradmin role can dothis--but I haven't given these new accounts that role but they still have the ability to do it. Could the newlogins be inheriting this ability someone? And how would one specifically deny a login the ability to pause orstop the server. Remote logins would be useless if I gave them out and the user could stop my server. I have also found that if I log in the query analyzer with one of these accounts in question, and try the"SHUTDOWN" command, it gives the error "User does not have permission to perform this action." which is perfect.However, when I log in through the enterprise manager with the same login, I still get the stop/pause server optionwhen I right click on the server registration. Would anyone know if the transact-sql "shutdown" command and the"stop" server option listed in enterprise manager are based on different permissions? Also, from my understanding, the login accounts are made inside sql server and are not tied to any windows accounts. When I have tried the logins, it's using sql server authentication alone. Thanks for any info you can provide.
|