Thursday, February 16, 2012

BUILTIN\Administrators vs System Administrator

Hello all,

does someone know where to find information regarding what is accesible to a BUILTIN\Administrator which is not accesible to a System Administrator?

Somewhere I have read that a System Administrator can not see the "All users' folders (i.e. the collection of "My folder"s for all users of the Report Server) but I have also experienced a behaviour which has surprised me: as a System Administrator with all permissions I cann't even see folders that a BUILTIN\Administrator can.

Does it mean that a System Administrator can not really manage all the resources of a Report Server?

Any ideas will be welcomed. Many thanks.

Firstly I would like to ask from where you have read the information, rather than replying you to with generic answers in this topic.

As one of the best practices is to remove the Builtin\Administrators as a part of security breakdown involving the sysadmin role. By default (from installation), the NT group BUILTIN\Administrators is granted sysadmin rights to SQL Server because it is made a member of the syadmin role. The BUILTIN\Administrators group corresponds to the local Administrators group for the server.

No comments:

Post a Comment