SQL Server Performance

Logins created

Discussion in 'General DBA Questions' started by pcsql, Feb 17, 2005.

  1. pcsql New Member

    Besides BUILTINAdministrators and sa, are there any logins which will be created by default in SQL Server 2000?

    Thanks.
  2. Luis Martin Moderator

    By default, no. (I suppose you mean installation time)

    Luis Martin
    Moderator
    SQL-Server-Performance.com

    One of the symptoms of an approaching nervous breakdown is the belief that one's work is terribly important
    Bertrand Russell


    All postings are provided “AS IS” with no warranties for accuracy.



  3. pcsql New Member

    Thanks Luis. So, if I see any Windows User as login, it must be added by someone.
  4. Luis Martin Moderator

    Yeap.

    Luis Martin
    Moderator
    SQL-Server-Performance.com

    One of the symptoms of an approaching nervous breakdown is the belief that one's work is terribly important
    Bertrand Russell


    All postings are provided “AS IS” with no warranties for accuracy.



  5. pcsql New Member

    Hi Luis,

    I have justed installed an instance of SQL Server 2000. I notice that a Windows User login is automatically added. This instance is using Windows Authentication.
  6. Luis Martin Moderator

    That's ok. In original post, I suppose you refer to sql authentication. Sorry by that.


    Luis Martin
    Moderator
    SQL-Server-Performance.com

    One of the symptoms of an approaching nervous breakdown is the belief that one's work is terribly important
    Bertrand Russell


    All postings are provided “AS IS” with no warranties for accuracy.



  7. pcsql New Member

    Hi Luis,

    So, if the instance is using mixed mode, will a Windows User login be added automatically?

    Thanks.
  8. Luis Martin Moderator

    Righ now, without documentation, I suppose no. You have to add Windows User login, except windows Administrator. Just in case, wait others oppinions.



    Luis Martin
    Moderator
    SQL-Server-Performance.com

    One of the symptoms of an approaching nervous breakdown is the belief that one's work is terribly important
    Bertrand Russell


    All postings are provided “AS IS” with no warranties for accuracy.



  9. satya Moderator

    No, Mixed mode allows users to connect using Windows Authentication or SQL Server Authentication. Users who connect through a Microsoft Windows user account can make use of trusted connections (connections validated by Windows) in either Windows Authentication Mode or Mixed Mode. SQL Server Authentication is provided for backward compatibility.



    Satya SKJ
    Moderator
    http://www.SQL-Server-Performance.Com/forum
    This posting is provided “AS IS” with no rights for the sake of knowledge sharing.
  10. pcsql New Member

    Hi Satya,

    I'm interested in knowing what logins are created by default in both Windows Authentication mode or mixed mode. For Windows Authentication mode, I believe it will create the following logins automatically:

    sa
    BUILTINAdministrators
    domainuser - I guess this is the user who installs the SQL Server.

    I have not tried the mixed mode but I guess it will create the following logins automatically:

    sa
    BUILTINAdministrators

    By the way, can a SQL Server set to use Windows Authentication mode during installation if the user is logged on using a local user account?


    Thanks.
  11. gkrishn New Member

    In both case
    sa
    BUILTINAdministrators are created as default.

    the user who install the server shud b an administrator of system and will b in BUILTINAdministrators automattically.No need to add seperatly

    Ans to ur last questions:
    even though u are local or domain usr who instal sqlserver, you shud have admin rights in local system.if you are a local user u shud have admin rights in local system. as i told u b4, ur login name will be automaticlaly added to BUILTINAdministrators.no need to add it explicitly.




  12. pcsql New Member

    Based on my testing in installing SQL Server with Windows Authentication, the following logins are created automatically:

    sa
    BUILTINAdministrators
    domainuser - I guess this is the user who installs the SQL Server.

    I did not add the domainuser separately.
  13. gkrishn New Member

    1)delete tht user (domainuser) from SQL server
    2)relogin using windows authentication.

    c wht happens.

    u can login becos, ur domainuser is already a memeber of BUILTINAdministrators
    deleteing tht user from sql server willnot affect any security settings.

    Hope your doubt is cleared


    Rajiv
    SQL-DBA
  14. pcsql New Member

    I understand that I can delete that Windows User and still able login due to BUILTINAdministrators. I'm trying to find out the following:

    1. Whether that Windows User login(the one installed the SQL Server) is always created automatically during installing a SQL Server using Windows Authentication or not.

    Based on my testing in installing SQL Server with Windows Authentication when I logged onto the domain, the following logins are created automatically:

    sa
    BUILTINAdministrators
    domainuser - the Windows User who logged onto the domain


    2. Can a user who has local administrative permissions log on to the operating system locally (so he/she is not logged onto the domain) and install a SQL Server using Windows Authentication? If yes, since the user only logs on locally, I guess that only sa and BUILTINAdministrators logins are created automatically. Am I right?

    So, basically I want to know what logins are created automatically in installing a SQL Server using Windows Authentication when:

    1. the user is logged on locally
    2. the user is logged onto the domain

  15. Luis Martin Moderator

    The following is how work Windows authentication and mixed mode:

    1) Connect to SQL Server using client application.
    2) Athentication mode?

    3) Windows Authentication Mode.
    3.1) Connect using NT account?
    if yes: permision to connect? if yes: connection accepted by SQL Server
    if not: connection refused by SQL Server.
    if not: connection refused by SQL Server.
    4) Mixed mode
    4.1) Connect using SQL Server login?
    if yes: Valid login? if yes: correct password? if yes: connection accepted by SQL
    if not: connection refused by SQL
    if not: connection refused by SQL
    if not then 3.1

    Hop that help.


    Luis Martin
    Moderator
    SQL-Server-Performance.com

    One of the symptoms of an approaching nervous breakdown is the belief that one's work is terribly important
    Bertrand Russell


    All postings are provided “AS IS” with no warranties for accuracy.



  16. pcsql New Member

    Hi Luis,

    Thank you for your reply. But I'm interested in what logins are created automatically not how the authentication works.

  17. Luis Martin Moderator

    Ok. In my oppinion, if you install SQL with windows authentication or Mixed mode, automatically SQL create:

    BUILTINAdministrator
    Sa

    That's because you can change on the fly from Windows Authentication to Mixed mode after SQL is installed.

    If domain is present, then also domain-nameuser, is created.



    Luis Martin
    Moderator
    SQL-Server-Performance.com

    One of the symptoms of an approaching nervous breakdown is the belief that one's work is terribly important
    Bertrand Russell


    All postings are provided “AS IS” with no warranties for accuracy.



  18. gkrishn New Member

    For you to install a software in a machine u need admin rights.So you can be
    1)local admin
    or
    2)domain user has admin rights in system.

    So when u install SQlserver it wil add
    a)sa
    b)BUILTINAdministrator (contains ur admin login)
    c)domainuser (user who istalled the software, can be a domain user havin admin rights
    in the machine or local admin)

    Hope ur doubt is cleared


    Rajiv
    SQL-DBA
  19. pcsql New Member

    According to a MS person, the domain user login is created because I assign it to the service account. I have not verified it but I believe he is right since he is very knowledgeable.[<img src='/community/emoticons/emotion-2.gif' alt=':D' />]<br /><br /><br />
  20. Argyle New Member

    Yes its the SQL service account. No other accounts are added.

    SQL installed with LocalSystem account for Service (in ANY authentication mode)
    sa
    BUILTINAdministrator

    SQL installed with Local or Domain account for Service (in ANY authentication mode)
    sa
    BUILTINAdministrator
    <domain><sql_service_account_name>
  21. pcsql New Member

    Hi Argyle,

    Thank you for the confirmation. BTW, Have you seen this information "service account will be added as a login" in any article or anywhere in BOL?

Share This Page