SQL Administration without Local Admin privilege

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi all,

I would like to accomplish the following task without giving access to the
SQL Cluster server. I don’t know it is possible or not. Following are the
things DBA would like to perform on a SQL cluster box.

Single User Mode testing
MSSQL Folder Access
Cluster Administration
Restart the SQL Machine
Install Service Packs/hot fix

Is there any way I can assign these permissions through group policy without
giving them full Local Administrator privilege.

Thanks in advance..
 
As I read your post, some objectives can and some
cannot be accomplished. Comments within . . .

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
-Sari said:
Hi all,

I would like to accomplish the following task without giving access to the
SQL Cluster server. I don't know it is possible or not. Following are the
things DBA would like to perform on a SQL cluster box.

Single User Mode testing
Click to expand...
You would need to give the accounts full control
over the services of SQL so that they could stop
and start them to bring SQL up in single user mode.
MSSQL Folder Access
Click to expand...
This is only ACLing on the filesystem level
Cluster Administration
Click to expand...
You did not limit this to any specific aspects, so
in general this is, like it says, "Administration"
and will need Administrator access on the involved
machines
Restart the SQL Machine
Click to expand...
same as for running SQL in single user mode if by
the SQL Machine you mean SQL, else server operators
has ability to reboot a machine and there is a user right
governing this ability
Install Service Packs/hot fix
Click to expand...
This requires Adminstrators level access, but
you could leverage service delivery mechanisms
so that they do not need to initiate service application.
 
Is it possible to manage JUST windows 2003 cluster without Local
Administrator previleage on the cluster box?
 
You should ask that in the newsgroup
microsoft.public.windows.server.clustering
being specific about the OS versions and just precisely
what cluster administrative duties you wish delegated.
 
Back
Top