A Rant.. Microsoft’s Own software and SQL Server Permissions: A Security concern That is a real nuisance for DBAs
A Rant.. Microsoft’s Own software and SQL Server Permissions: A Security Concern That is a real nuisance for DBAs Introduction: How many times have you heard the phrase “Microsoft best practice”? For many DBAs, it often rings hollow. We’re used to developers requesting sysadmin permissions to sidestep issues, sometimes out of laziness or convenience, but the real challenge often comes not just from our own developers or COTS packages, but from Microsoft’s own products. Microsoft’s installers frequently request sysadmin rights during setup — even if only temporarily. While this might seem necessary for some installations, it raises serious security concerns. Once granted, these permissions can lead to changes that DBAs may not fully understand or be able to track. This post explores why Microsoft’s approach conflicts with the security principles it advocates and why it’s a major challenge for database administrators. The Challenge: Sysadmin Permissions During Installation Many Microsoft...