0
kicks
Microsoft SQL SERVER – Security
What are Builtin\Administrators?
SQL Server creates a default NT Group login called Builtin\Administrators during installations.This login facilitates the following All local NT administrators on the server to have default sysadmin privileges Automatic access to system tables Automatic access to user tables How security is compromised?
SQL Server security is compromised as follows Vulnerable to changes by local administrators by giving default sysadmin rights System and user database objects can be tampered, changed or deleted High chance of unknowingly deleting objects or critical data No restrictions for these users as they are by default sysadmins Business data can be compromised Auditing is very difficult as tracing these logins is a performance hit on the server Any unwanted hacker can gain access to SQL Server if he/she can get local administration rights Microsoft article – http://support.microsoft.com/kb/263712How to secure SQL Server from this login?