Our SQL Server DBA has left the company with many of the databases owned by his domain user. I understand that I could change database ownership using sp_changedbowner. Does anyone know what would be a better option, from security point of view?
1. Let databases owned by 'sa' like all system databases.
2. Let databases owner by the domain account that runs SQL Service.
3. Create a local/domain account which owns all databases on this SQL Server instance.
4. Let databases owned by Administrator account.
I am new to SQL Server. Help would be appreciated.Howdy
'sa' is the best way to go.
By all means, set up SQL & SQL Agent to run using a domain account unless it needs to be a highly secure box.
By the way, any account who is in the local Administrators group ( this is NT security I'm talking about ) on the box, is automatically sa ( potential LARGE security hole ).
Post back if any more questions. Happy to answer.
Cheers
SG|||Thanks for the info, will try that.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment