.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
david stephan
Gaurav Pal
Post New Web Links

Removing BUILTIN\Administrators

Posted By:      Posted Date: September 02, 2010    Points: 0   Category :Sql Server
Hi, We had setup a SQL 2005 cluster active/passive server. We are going to use this one for production. Now we want to remove the BUILTIN/Administrators from SQL Logins. As far I know we need to add the Cluster service account to SQL LOGINS then we are good to remove the builtin/admin. Is there any other things need to be taken care? Is it possible to add BUILTIN/Administrators again to SQL login? Please advice

View Complete Post

More Related Resource Links

Considerations with 2005 Cluster when removing 'BUILTIN\Administrators'

I have taken the descision to remove 'BUILTIN\Administrators' group from my clustered instances. This is not done before I inherited this environment and some violation in my oppinion is happening on the SQL Servers. To do this Im asked to generate a risk assesment report. I have a couple of questions, but first my intended aproach. Today SA pwd is unknown to everyone, even me. If it's needed pwd is reset to something temporary, and a job resetting the pwd is created. To secure access I will create a AD group, add this group to the sql server and grant this domain group the sysadmin server role. I will also generate a new SA pwd and redesign the temporary SA pwd solution to reset the pwd back to whatever I generate. This pwd will go into a safe. I know how to fix it if I loose all access to SQL Server, by using a startup flag and then adding another domain group, should some clumsy admin drop the one I created. To my question, does the cluster service account need to be a member in this SQL access account? The SQL Service account, and SQL Agent is to be incorporated into this new domain group. My account and some other DBA will have their accounts added. No accidental DBA's will then have access from this point forward. What kind of application errors can I expect? The cluster hosts the databases for about 60 different applications. Can I Trace who logs on with the '

Explicit Login and BUILTIN\Administrators question


I have a single instance of SQL Server 2005 Std SP3 running on a W2003 Server std SP2 called SRVBIZ.


I have a windows domain admin account named  ROB\business.


On SRVBIZ, ROB\business is a member of the Administrators group.


In SQL Server, The BUILTIN\Administators group login is enabled is granted permission to connect to the database engine. So ROB\business is a member of this group.


In SQL Server, ROB\business also has it's own explicit login and has dbo permissions on DB1


I now deny permission to connect to the database engine for the BUILTIN\Administrators group.


removing item from datatable


hi to all ..thanks in advance


I have Two datatables dtA,dtB ,both contains column name is "FiledName" I need to remove item

from dtA when same row data exists in dtB.  please tell me how to do it

dtA    dtB   

 A        A

 B        F

 C        C

 D        Z

I want o/p like this







Removing Xml Namespaces from XmlSerialization

I am currently using Xml Serialization to serialize my classes in Visual Studio 2010, but I have been unable to remove the default namespaces that get attached to my document. These two elements get attached to the root of my document each time. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" When I specify my XmlRoot attribute on my class, I have tried both methods: [XmlRoot("requestor", Namespace="")] as well as <pre lang="x-c#">[XmlRoot("requestor")] Both of these methods have continued to result in the namespace being appended to my XmlDocument. This is currently the method I have been calling for my Xml Serialization: <pre lang="x-c#">/// <summary> /// Performs XmlSerialization of a particular object/class /// using the .Net Xml Serializer /// </summary> /// <param name="objForSerialization">object or class instance to be serialized</param> /// <returns>string containing the serialized object in Xml Document format</returns> public static string XmlSerialize(object objForSerialization) { string strSerialized = string.Empty; using (MemoryStream memoryStream = new MemoryStream()) { XmlSerializer serializer = new XmlSerializer(objFo

removing guest account from sql 2005 databases

I cannot remove the guest account from my databases.  I know that I cannot and should not remove the guest account from master and tempdb.  but when i try to remove it from other databases I get some message about the guest account being a in schema or something like that.  so what should i do? thanks

Any issues removing backup mount point cluster resources from SQL Server dependencies?

Win 2003, SQL 2005/SQL2008 64 bit enterprise failover cluster with 3 nodes and 6 instances. The mount points configured as cluster resources for the data/backup/logs. The entire cluster mount points are SAN replicated to a DR Site. But backup drives/LUNs are excluded from the replication. All the disk resources including backup LUNs are set to dependencies on the SQL Server server. The SQL Server is not coming on-line in the DR Site due to unavailability of the backup LUNs (failed resources). As per the documentation all the disk resources must be set to dependencies (http://support.microsoft.com/kb/835185). Thought it did not specifically mentions only Data/Log mount points and/or the backup LUNs as well. "The SQL Server 2005 resource depends on the SQL network name resource and the physical disk resources that hold its data. When mount points are being used together with the physical disks, each mount point must appear as a cluster resource. Additionally, each mount point must also be added as a SQL Server dependency. If only the root physical disks dependency is added and the mount points are not added, database corruption will occur on failover. Database corruption may also occur when SQL Server is restarted without failing over. "     What if I remove the backup LUNs from dependencies list. This will allow me to recover the SQL Server

Text Calculation - Removing all text after space

I have a list with workflows that was created for one of our clients that allows them to enter some information and the workflow takes care of sending emails to the necessary recipients as well as notifying the person the task is assigned to when it has reached a certain status or age. The "agent name" colum contains the agent's first and last name (ie John Smith).  I am wondering if there is a way that in the workflow, when an email is generated, if I am able to remove the last name using some sort of text calculation.  The reason I would like to try and do it this way if possible is that if I add the Columns Agent First Name and Agent Last Name, the current Agent Name colum that is being used to generate the agent's name in the email will now not be the correct column to use for this information and the 100s of entries already in the lists will not send out emails properly. Does anyone have a suggestion for this, or know some sort of text calculation formula that I can use to remove the last name from the lookup in the email?

Removing a (child) user control from an observable collection

Hey all, so I have an ObservableCollection of UserControls.  These user controls have their own xaml and each of these has some type of "Close" button so it would be removed from the ObservableCollection. A groupbox is binded to the ObservableCollection so it would show all the UserControls.  When a user clicks on the "Close" button, the user control is removed from the ObservableCollection and thus, the groupbox.  How can I do this?  I've tried something like   (this .Parent as ObservableCollection<asdf>).Remove(this );   where asdf is a UserControl but I get a bunch of compiler errors.

Adding, removing or editing the items of combobox.....

Hello everyone, I am working on this application which requires Items of the combobox added, edited or removed by the end user in the different section of the application such as settings window or something like that. I guess If we bind the Combobox to the database where we could easily add , remove or edit the items of combox but for the application that doesn't use database that creates a lot of overhead. To demonstrate that Here is my sample application Window1.xaml <Window x:Class="MySampleApplication.Window1" xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation" xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml" xmlns:s="clr-namespace:System;assembly=mscorlib" Title="Window1" Height="300" Width="300" xmlns:local="clr-namespace:MySampleApplication" ResizeMode="NoResize" WindowStartupLocation="CenterScreen"> <Window.Resources> <local:StringsLenToBooleanConverter x:Key="mvc"/> </Window.Resources> <Grid> <ComboBox Height="26" Margin="12,75,12,0" Name="comboBox1" VerticalAlignment="Top"> <s:String>Red</s:String> <s:String>Blue</s:String> <s:String>Green</s:String> </ComboBox> <Button Height="28&quo

Removing the HTML wrapped around web parts?

I work with both SP 2007 and 2010 for WCM and this has always been a problem. Every web part or web part zone is almost always wrapped in at least one table and/or several divs. In 2010 I'm finding that even the XLV part is getting this wrapper. Besides being a lot of bloat that wastes bandwidth, it makes it much harder to customize the look and feel of the site. Is there a way to turn this off or modify the output? I don't care what it has to do for edit mode to make the UI function, but when serving pages to anonymous web surfers I'd like to eliminate the code. As an example, here's the beginning wrapper code for a CQWP in SP 2010. The actual content that needs to be displayed is a simple unordered list: <table width="100%" cellpadding="0" cellspacing="0" border="0"> <tr> <td id="MSOZoneCell_WebPartWPQ1" valign="top" class="s4-wpcell-plain"> <table class="s4-wpTopTable" border="0" cellpadding="0" cellspacing="0" width="100%"> <tr> <td valign="top"> <div WebPartID="c0f138b4-3002-4e47-a797-e4cd1a2b23c1" HasPers="false" id="WebPartWPQ1" width="100%" class="ms-WPBody noindex" allowDelete="false" style="&qu

Using builtin SPFieldType in a BDC

(Sorry the Editor totally and for me unrecoverably destroyed the code sections so bear with me) Hi, ive built myself a BDC which basically maps a table in a MySQL database to an external list in a Sharepoint 2010 Foundation Server. Everythings works fine as long as I keep to the basic FieldTypes like System.String, System.DateTime, SystemInt32 etc. The type I set in the <TypeDescriptor> part of the bdcm XML file, like:   TypeName = " System.String " TypeName = " System.DateTime "   The properties dialog in the VS2010 GUI lets me choose only the System.* types and what I have in my local project as classes. Now ive seen all the builtin field types in the Designer and read about SpCustomFieldTypes, and want to use that with as less hassle as possible. So ive queried my Sharepoint Instance about the FieldTypes I could possibly use:   "Counter" -> Counter () "Single line of text" -> Text (Microsoft.SharePoint.SPFieldText) "Multiple lines of text" -> Note (Microsoft.SharePoint.SPFieldMultiLineText) "Choice" -> Choice (Microsoft.SharePoint.SPFieldChoice) "Choice" -> MultiChoice (Microsoft.SharePoint.SPFieldMultiChoice) "Rating Scale" -> GridChoice (Microsoft.SharePoint.SPFieldRatingScale) "Integer" -> Integer () "Number" -> Number (Mic

"NT Authority\SYSTEM" is member of Windows Administrators group? How to check it?

I have workgroup Windows XP Pro SP3 with SQL Server 2008 R2 I have read the answer of Satya SKJ in Purpose of "NT AUTHORITY\SYSTEM" login in SQL Server 2005 topic in this forum (*): "Local System account. The name of this account is NT AUTHORITY\System. It is a powerful account that has unrestricted access to all local system resources. It is a member of the Windows Administrators group on the local computer, and is therefore a member of the SQL Server sysadmin fixed server role" Why do not I see "NT Authority\SYSTEM" as a member of Administrators group in my computer (compmgmt.msc ---> System Tools --< Local Users and Groups --> Groups --> administrators)? I see there only  Administrator. How to check and manage the membership of "NT Authority\SYSTEM" (as well as of "NT Authority\Network Service" and "NT Authority\Local Service") in Windows? (*) Update: Now, I found the same phrase it in MS SQL Server 2008 R2 BOL [1] Cited: http://msdn.microsoft.com/en-us/library/ms191543.aspx Selecting an Account for the SQL Server Agent Service (SQL Server 2008 R2)   

Removing Extra Padding Around Interactive Sort Arrows

I have a report (using SSRS 2005) which uses Interactive Sorting for all the headings in the table. There appears to be padding around the sort glyphs (arrows) on both the left and the right.  It looks like it is padding about 10px on the left and 10px on the right.  I don't have any setting in my report to explain this.  This means I have to size the text boxes to be a lot larger than they need to be otherwise the heading label wraps to another line. Here's what the text box looks like: ---------------------- | Review Date     ?     | ---------------------- As you can see in my representation there is a lot of padding to the left and right of the sort image. Is there anyway to get rid of this extra padding around the sort glyphs?  I've tried everything I can think of.  If not, can I keep the heading labels from wrapping?  I've tried non-breaking spaces but they still wrap to the next line. Thanks in advance, -- John...

removing new document and new folder from toolbar

hi, is there a way to remove new document and new folder from toolbar using jquery or javascript

Removing remants of previous install

I have a remnant of a previous install of SQL Server (circa 2000) that is preventing me from installing 2008 r2. There is no evidence of an installed version in either my menu of programs or the list generated in Control Panel/Add Remove Progs. However, there is an icon in my taskbar for the SQL Server Service Manager. When I trigger it, a dialog box opens up. The top drown box for Server is empty. The next drop down box for Services is empty. None of the command buttons (start, pause, stop) will run because "This service control action cannot be completed as no service has been selected." There are no services in either drop down box to be selected. In the lower left corner of the Service Manager dialog box is the message "Not connected - \\". When I run the configuration check prior to installing 2008 r2, it fails at the consistency check, indicating that there is another version of SQL Server installed. The Help provided advises that this other version must be removed before 2008 r2 can continue. Does anyone out there have a suggestion as to how I can try to "get to" a previous install of this nature, in order to get rid of it? I'm running XP Pro on a Dell Dimension 8400 workstation. Many thanks in advance for any help you can provide. John

WebConfigModifications.Remove() is adding instead of removing

I implemented the FeatureDeactivating event just like the activated event except I used the Remove() method instead of Add(). From all the articles I found this is what you're supposed to do, but perhaps I'm missing something.  I also tried removing all modifications for a specific owner, which resulted in duplicating every modification that owner made.  Everything seems to suggest that the Remove() method is actually adding entries. Here is my code, can someone tell me if I've done someting wrong or if this is a bug? using System; using System.Runtime.InteropServices; using System.Security.Permissions; using Microsoft.SharePoint; using Microsoft.SharePoint.Security; using Microsoft.SharePoint.Administration; namespace Sample.Features.Feature2 { [Guid("3eac000f-333d-4ee2-a961-2eda341b6c66")] public class Feature2EventReceiver : SPFeatureReceiver { public override void FeatureActivated(SPFeatureReceiverProperties properties) { // Create a configuration object SPWebConfigModification config = new SPWebConfigModification(); config.Type = SPWebConfigModification.SPWebConfigModificationType.EnsureChildNode; config.Owner = "Sample"; config.Name = "WorkflowService[Class='ClassLibrary1.CustomService']"; config.Path = "configuration/SharePoint/WorkflowServices";

Accounts used by application pools or service identities are in the local machine Administrators gro

ERROR: Using highly-privileged accounts as application pool or as service identities poses a security risk to the farm, and could allow malicious code to execute.  The following services are currently running as accounts in the machine Administrators group: SharePoint Central Administration v4 (Application Pool) SPTimerV4(Windows Service) there are 2 accounts associated with this install. 1. SQL ACCOUNT 2. SP Admin account(farm) the admin account has the following listed components    Farm components using this account      Microsoft SharePoint Foundation Application Pool: SharePoint - 80 SharePoint Server Search Web Analytics Data Processing Service Farm Account User Profile Synchronization Service Microsoft SharePoint Foundation Sandboxed Code Service Access Services Secure Store Service PowerPoint Service Application Word Viewing Service PerformancePoint Service Application Visio Graphics Service Managed Metadata Service Web Analytics Service Application Word Automation Services Excel Services Application Business Data Connectivity Service Search Administration Web Service for Search Service Application User Profile Service Application Search Service Application Application Discovery and Load Balancer Service Application Security Token Service Application   The farm account is not listed in the local machines admi
ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend