Setup DBA Registry Permissions
| Previous Setup DBA File Permissions | Manual Install | Setup WMI Permissions Next |
|---|
FineBuild will Setup Registry Permissions for DBAs so they can access the SQL Server folders.
The Microsoft SQL Server install will set explicit registry security on the objects created during the install, overwriting any existing permissions. The assigned permissions allow local Administrator access but do not allow access to the DBA groups. FineBuild updates these permissions so that the DBA groups do have access, allowing DBA staff to perform their proper administrative functions on SQL Server.
Permissions need to be set up on the following registry keys:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSQLServer
FineBuild will automatically Setup Registry Permissions to allow DBAs to access the SQL Server registry keys.
The Setup Registry Permissions processing relates to Process Id 2CAI.
FineBuild also uses the following parameters to help Setup Registry Permissions:
| Parameter | Default Value | Description |
|---|---|---|
| /GroupDBA: | none | Name of DBA Windows group for sysadmin access |
| /GroupDBANonSA: | none | Name of DBA Windows group for low privilege access |
The following steps show what you would have to do to Setup Registry Permissions manually. FineBuild does all of this work for you automatically.
The following process will allow DBA staff to access the specified SQL Server registry keys. If you are using Windows 2003 and you did not Install Windows 2003 KB933789, the registry permissions processing will be bypassed.
-
Open the Registry Editor by Start -> Run and type regedit
-
Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server
You will see a display similar to that below. Right click on the registry key and select Permissions
-
Click on Add
-
Enter the DBA sysadmin group
Click on Check Names and then click on OK
-
Set the authorities to Full Control
Click on Apply
-
Repeat steps 4) and 5), using the DBA Non-sysadmin group
Set the authorities to Read and click on OK
-
Repeat all the above process,
Use the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSQLServer
Copyright FineBuild Team © 2013 - 2021. License and Acknowledgements
| Previous Setup DBA File Permissions | Top | Setup WMI Permissions Next |
|---|