BUILTIN\Administrators

Hi,
I must remove BUILTIN\Administrators. Should i create 2=20
domain accounts, one for each service (MSSQLServer, SQL=20
Server Agent) or one for the two services ' actually i'm=20
using LOCAL SYSTEM ACCOUNT.
If i use 2 accounts i must give sysadmin for the two=20
accounts, and i don't use the account sa, i have one other=20
account with sysadmin permiss=F5es for my day by day work.=20
When i use MBSA, i always get the message that i have more=20
than 2 sysadmins. How can i troubleshoot this question '
What is your approach of remove BUILTIN\Administrators and=20
start the accounts with domain non admin accounts ?
My approach:
-Remove BUILTIN\Administrators
-create one domain account with regular priviledges
-assign the account for the two services
-grant SQLServer sysadmin rights on the account
Can anyone give a nice approach for this question ?=20
issues regarding the change ?
Thanks in advance for the help
Miguel
MCPI would use 1 domain account... The necessary permissions can be found in
books on line. Search for "service accounts"
Wayne Snyder, MCDBA, SQL Server MVP
Computer Education Services Corporation (CESC), Charlotte, NC
www.computeredservices.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"Miguel" <anonymous@.discussions.microsoft.com> wrote in message
news:05fc01c3db7f$f6c96870$a001280a@.phx.gbl...
Hi,
I must remove BUILTIN\Administrators. Should i create 2
domain accounts, one for each service (MSSQLServer, SQL
Server Agent) or one for the two services ' actually i'm
using LOCAL SYSTEM ACCOUNT.
If i use 2 accounts i must give sysadmin for the two
accounts, and i don't use the account sa, i have one other
account with sysadmin permisses for my day by day work.
When i use MBSA, i always get the message that i have more
than 2 sysadmins. How can i troubleshoot this question '
What is your approach of remove BUILTIN\Administrators and
start the accounts with domain non admin accounts ?
My approach:
-Remove BUILTIN\Administrators
-create one domain account with regular priviledges
-assign the account for the two services
-grant SQLServer sysadmin rights on the account
Can anyone give a nice approach for this question ?
issues regarding the change ?
Thanks in advance for the help
Miguel
MCP