Dumb permissions question

Hi

I'm running SQL Server 2000 on a Windows 2003 SBS server. Much to my
horror I notice that that the SQL data directory has permissions set
for:
 Domain\Administrator
 (full accesss)
 Domain\Administrator
s (full accesss)
Authenticated users (read,list, read). I guess this isn't a good idea
at all!

What are the optimum permissions here (I can't seem to get a straight
answer). Do I set it for the SQL service to have full control only (at
the moment MSSQLSERVER service is logging on using
 Domain\Administrator
). Do I change this account? What about the other
SQL Server related services? Please also note I am also using Backup
Exec 9 to backup the databases.

Any suggestions you may have will be greatly appreciated!

Many thanks

Alex

< postings@alexshirley
.com> wrote in message
news:1133285607.162678.51170@g14g2000cwa.googlegroups.com...
> Hi
>
> I'm running SQL Server 2000 on a Windows 2003 SBS server. Much to my
> horror I notice that that the SQL data directory has permissions set
> for:
>  Domain\Administrator
 (full accesss)
>  Domain\Administrator
s (full accesss)
> Authenticated users (read,list, read). I guess this isn't a good idea
> at all!
>
> What are the optimum permissions here (I can't seem to get a straight
> answer). Do I set it for the SQL service to have full control only (at
> the moment MSSQLSERVER service is logging on using
>  Domain\Administrator
). Do I change this account? What about the other
> SQL Server related services? Please also note I am also using Backup
> Exec 9 to backup the databases.
>
> Any suggestions you may have will be greatly appreciated!
>
> Many thanks
>
> Alex

On my SQL Server 2000 database running on Windows 2003 standard server, the
permissions on the SQL data directory are just for  Domain\Administrator
s,
full access. The MSSQLServer service is set to use the local system account.

If your authenticated users have access then you should be able to revoke
that without problem.

I don't know where Backup Exec fits into the picture - I don't use it - but
it shouldn't be backing up the files directly so it shouldn't need any
permissions on the folder.

Hope this is useful.
--
Brian Cryer
www.cryer.co.uk/brian

Great, thanks for your help Brian...!

Alex

----->
Brian Cryer wrote:

> < postings@alexshirley
.com> wrote in message
> news:1133285607.162678.51170@g14g2000cwa.googlegroups.com... 
>
> On my SQL Server 2000 database running on Windows 2003 standard server, th
e
> permissions on the SQL data directory are just for  Domain\Administrator
s,
> full access. The MSSQLServer service is set to use the local system accoun
t.
>
> If your authenticated users have access then you should be able to revoke
> that without problem.
>
> I don't know where Backup Exec fits into the picture - I don't use it - bu
t
> it shouldn't be backing up the files directly so it shouldn't need any
> permissions on the folder.
>
> Hope this is useful.
> --
> Brian Cryer
> www.cryer.co.uk/brian