builtin\administrators login and database access

How do I remove db_owner access from the
builtin\administrators sql login?
The db_owner and sysadmin roles have been assigned to the
windows domain account that starts SQL Server and the sa
login for all db's.
I need to remove this for secutiry/legal reason.
Any problems if I just remove the builtin\administrators
login?
Thanks."Matt Troska" <matt.troska@.co.mcleod.mn.us> wrote in message
news:495f01c3e42f$efd44e50$a501280a@.phx.gbl...

quote:

---

> How do I remove db_owner access from the
> builtin\administrators sql login?

---

You don't want to do that...

quote:

---

> The db_owner and sysadmin roles have been assigned to the
> windows domain account that starts SQL Server and the sa
> login for all db's.
> I need to remove this for secutiry/legal reason.
> Any problems if I just remove the builtin\administrators
> login?

---

That's the correct approach, as long as you've granted another group/user
sysadmin equivalence, then you can safely delete the builtin\administrators
group.
After I install SQL Server and setup the security, deleting the
builtin\administrators group is usually one of the first steps I take.
Steve

BUILTIN\Administrators

Is it customary/good practice to remove the
BUILTIN\Administrators group from the system databases?
Thanks,
FergieI usually create some other group for the windows accounts who are to be
sysadmins and remove this one.
Tibor Karaszi, SQL Server MVP
Archive at:
http://groups.google.com/groups?oi=...ublic.sqlserver
"Fergie" <anonymous@.discussions.microsoft.com> wrote in message
news:e91b01c3f086$ed5684a0$a501280a@.phx.gbl...
> Is it customary/good practice to remove the
> BUILTIN\Administrators group from the system databases?
> Thanks,
> Fergie|||Be very careful if you try to do this to a clustered SQL server. I think
there is a kb article about it.
Christian Smith
"Fergie" <anonymous@.discussions.microsoft.com> wrote in message
news:e91b01c3f086$ed5684a0$a501280a@.phx.gbl...
> Is it customary/good practice to remove the
> BUILTIN\Administrators group from the system databases?
> Thanks,
> Fergie