Monday, March 12, 2012

Permissions Changed

Hello!
At some point over the weekend my user account (which is an admin
account) lost the ability to perform administrative tasks in SQL
Server 2000. I can no longer create a database, create users, modify
existing tables, etc. Three days ago I was able to create a database
with no problems. The network guy and I are trying to figure out what
caused this problem. It seems that all admin accounts have lost these
permissions. Does anyone have any suggestions what I can check for?
Thanks,
--
JerryCheck out your Logins in SQL Server, whether or not for instance the local Administrators group is
still there, and whether it is a member of the sysadmin server role.
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://sqlblog.com/blogs/tibor_karaszi
"Jerry" <jerryalan@.gmail.com> wrote in message
news:1191357676.328164.54550@.50g2000hsm.googlegroups.com...
> Hello!
> At some point over the weekend my user account (which is an admin
> account) lost the ability to perform administrative tasks in SQL
> Server 2000. I can no longer create a database, create users, modify
> existing tables, etc. Three days ago I was able to create a database
> with no problems. The network guy and I are trying to figure out what
> caused this problem. It seems that all admin accounts have lost these
> permissions. Does anyone have any suggestions what I can check for?
> Thanks,
> --
> Jerry
>|||Your account could be removed from Domain Admins or Local Admins group.
It seems that you still are able to login to your SQL Server. In a false
scenario, you might be a member of Domain Users and Domain Admins groups.
And these groups may have logins in SQL Server. Let's assume that Domain
Users login has only public role and Domain Admins login has sysadmin role.
If you are removed from Domain Admins Windows Group, then you lost your
sysadmin role right and now you login to your SQL Server only as using
public role. (I setup a role like this cause you mentioned about a network
and I thought there could be a domain in your environment)
Your situation must be something like this. Check out your logins as Tiber
also mentioned.
--
Ekrem Önsoy
"Jerry" <jerryalan@.gmail.com> wrote in message
news:1191357676.328164.54550@.50g2000hsm.googlegroups.com...
> Hello!
> At some point over the weekend my user account (which is an admin
> account) lost the ability to perform administrative tasks in SQL
> Server 2000. I can no longer create a database, create users, modify
> existing tables, etc. Three days ago I was able to create a database
> with no problems. The network guy and I are trying to figure out what
> caused this problem. It seems that all admin accounts have lost these
> permissions. Does anyone have any suggestions what I can check for?
> Thanks,
> --
> Jerry
>|||Thanks for the reply. I checked and the admin group that was set up
for me is still in the SQL Users list. Unfortunately my account no
longer has the permissions it needs to check if it's in the sysadmins
group.
--
Jerry
On Oct 2, 3:46 pm, "Tibor Karaszi"
<tibor_please.no.email_kara...@.hotmail.nomail.com> wrote:
> Check out your Logins in SQL Server, whether or not for instance the local Administrators group is
> still there, and whether it is a member of the sysadmin server role.
> --
> Tibor Karaszi, SQL Server MVPhttp://www.karaszi.com/sqlserver/default.asphttp://sqlblog.com/blogs/tibor_karaszi
> "Jerry" <jerrya...@.gmail.com> wrote in message
> news:1191357676.328164.54550@.50g2000hsm.googlegroups.com...
> > Hello!
> > At some point over the weekend my user account (which is an admin
> > account) lost the ability to perform administrative tasks in SQL
> > Server 2000. I can no longer create a database, create users, modify
> > existing tables, etc. Three days ago I was able to create a database
> > with no problems. The network guy and I are trying to figure out what
> > caused this problem. It seems that all admin accounts have lost these
> > permissions. Does anyone have any suggestions what I can check for?
>|||We have an admin group set up that is a part of the Windows
Administrators group. We're going to try to see if this group is a
part of the sysadmins role in SQL Server.
--
Jerry
On Oct 3, 3:29 am, Ekrem =D6nsoy <ek...@.btegitim.com> wrote:
> Your account could be removed from Domain Admins or Local Admins group.
> It seems that you still are able to login to your SQL Server. In a false
> scenario, you might be a member of Domain Users and Domain Admins groups.
> And these groups may have logins in SQL Server. Let's assume that Domain
> Users login has only public role and Domain Admins login has sysadmin rol=e=2E
> If you are removed from Domain Admins Windows Group, then you lost your
> sysadmin role right and now you login to your SQL Server only as using
> public role. (I setup a role like this cause you mentioned about a network
> and I thought there could be a domain in your environment)
> Your situation must be something like this. Check out your logins as Tiber
> also mentioned.
> --
> Ekrem =D6nsoy
> "Jerry" <jerrya...@.gmail.com> wrote in message
> news:1191357676.328164.54550@.50g2000hsm.googlegroups.com...
> > Hello!
> > At some point over the weekend my user account (which is an admin
> > account) lost the ability to perform administrative tasks in SQL
> > Server 2000. I can no longer create a database, create users, modify
> > existing tables, etc. Three days ago I was able to create a database
> > with no problems. The network guy and I are trying to figure out what
> > caused this problem. It seems that all admin accounts have lost these
> > permissions. Does anyone have any suggestions what I can check for?
>|||> Unfortunately my account no
> longer has the permissions it needs to check if it's in the sysadmins
> group.
It seems it isn't in the sysadmin group, or you would have been able to check that (assuming you are
logged in though this Windows group). So you need to go and find somebody who has privileges to
check this...
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://sqlblog.com/blogs/tibor_karaszi
"Jerry" <jerryalan@.gmail.com> wrote in message
news:1191500677.281166.191150@.w3g2000hsg.googlegroups.com...
> Thanks for the reply. I checked and the admin group that was set up
> for me is still in the SQL Users list. Unfortunately my account no
> longer has the permissions it needs to check if it's in the sysadmins
> group.
> --
> Jerry
> On Oct 2, 3:46 pm, "Tibor Karaszi"
> <tibor_please.no.email_kara...@.hotmail.nomail.com> wrote:
>> Check out your Logins in SQL Server, whether or not for instance the local Administrators group
>> is
>> still there, and whether it is a member of the sysadmin server role.
>> --
>> Tibor Karaszi, SQL Server
>> MVPhttp://www.karaszi.com/sqlserver/default.asphttp://sqlblog.com/blogs/tibor_karaszi
>> "Jerry" <jerrya...@.gmail.com> wrote in message
>> news:1191357676.328164.54550@.50g2000hsm.googlegroups.com...
>> > Hello!
>> > At some point over the weekend my user account (which is an admin
>> > account) lost the ability to perform administrative tasks in SQL
>> > Server 2000. I can no longer create a database, create users, modify
>> > existing tables, etc. Three days ago I was able to create a database
>> > with no problems. The network guy and I are trying to figure out what
>> > caused this problem. It seems that all admin accounts have lost these
>> > permissions. Does anyone have any suggestions what I can check for?
>|||Tibor,
I found an account to get in and did find that the group was not in
the sysadmin role. This was in the sysadmin role on Friday but on
Monday it wasn't there. Do you have any ideas what might have caused
this?
Thanks for your advice.
--
Jerry
On Oct 4, 7:50 am, "Tibor Karaszi"
<tibor_please.no.email_kara...@.hotmail.nomail.com> wrote:
> > Unfortunately my account no
> > longer has the permissions it needs to check if it's in the sysadmins
> > group.
> It seems it isn't in the sysadmin group, or you would have been able to check that (assuming you are
> logged in though this Windows group). So you need to go and find somebody who has privileges to
> check this...
> --
> Tibor Karaszi, SQL Server MVPhttp://www.karaszi.com/sqlserver/default.asphttp://sqlblog.com/blogs/tibor_karaszi
> "Jerry" <jerrya...@.gmail.com> wrote in message
> news:1191500677.281166.191150@.w3g2000hsg.googlegroups.com...
> > Thanks for the reply. I checked and the admin group that was set up
> > for me is still in the SQL Users list. Unfortunately my account no
> > longer has the permissions it needs to check if it's in the sysadmins
> > group.
> > --
> > Jerry
> > On Oct 2, 3:46 pm, "Tibor Karaszi"
> > <tibor_please.no.email_kara...@.hotmail.nomail.com> wrote:
> >> Check out your Logins in SQL Server, whether or not for instance the local Administrators group
> >> is
> >> still there, and whether it is a member of the sysadmin server role.
> >> --
> >> Tibor Karaszi, SQL Server
> >> MVPhttp://www.karaszi.com/sqlserver/default.asphttp://sqlblog.com/blogs/...
> >> "Jerry" <jerrya...@.gmail.com> wrote in message
> >>news:1191357676.328164.54550@.50g2000hsm.googlegroups.com...
> >> > Hello!
> >> > At some point over the weekend my user account (which is an admin
> >> > account) lost the ability to perform administrative tasks in SQL
> >> > Server 2000. I can no longer create a database, create users, modify
> >> > existing tables, etc. Three days ago I was able to create a database
> >> > with no problems. The network guy and I are trying to figure out what
> >> > caused this problem. It seems that all admin accounts have lost these
> >> > permissions. Does anyone have any suggestions what I can check for?|||> Do you have any ideas what might have caused
> this?
Most probably somebody removed it and:
* Don't remember it
* Didn't understand what he/she was doing
* Don't dare to come forward
I don't recall whether these events are logged to the default profiler trace (see the trc files in
same folder as where you find the errorlog file), but it is worth a shot to see if you find this
event there.
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://sqlblog.com/blogs/tibor_karaszi
"Jerry" <jerryalan@.gmail.com> wrote in message
news:1191505654.310090.315540@.k79g2000hse.googlegroups.com...
> Tibor,
> I found an account to get in and did find that the group was not in
> the sysadmin role. This was in the sysadmin role on Friday but on
> Monday it wasn't there. Do you have any ideas what might have caused
> this?
> Thanks for your advice.
> --
> Jerry
>
> On Oct 4, 7:50 am, "Tibor Karaszi"
> <tibor_please.no.email_kara...@.hotmail.nomail.com> wrote:
>> > Unfortunately my account no
>> > longer has the permissions it needs to check if it's in the sysadmins
>> > group.
>> It seems it isn't in the sysadmin group, or you would have been able to check that (assuming you
>> are
>> logged in though this Windows group). So you need to go and find somebody who has privileges to
>> check this...
>> --
>> Tibor Karaszi, SQL Server
>> MVPhttp://www.karaszi.com/sqlserver/default.asphttp://sqlblog.com/blogs/tibor_karaszi
>> "Jerry" <jerrya...@.gmail.com> wrote in message
>> news:1191500677.281166.191150@.w3g2000hsg.googlegroups.com...
>> > Thanks for the reply. I checked and the admin group that was set up
>> > for me is still in the SQL Users list. Unfortunately my account no
>> > longer has the permissions it needs to check if it's in the sysadmins
>> > group.
>> > --
>> > Jerry
>> > On Oct 2, 3:46 pm, "Tibor Karaszi"
>> > <tibor_please.no.email_kara...@.hotmail.nomail.com> wrote:
>> >> Check out your Logins in SQL Server, whether or not for instance the local Administrators
>> >> group
>> >> is
>> >> still there, and whether it is a member of the sysadmin server role.
>> >> --
>> >> Tibor Karaszi, SQL Server
>> >> MVPhttp://www.karaszi.com/sqlserver/default.asphttp://sqlblog.com/blogs/...
>> >> "Jerry" <jerrya...@.gmail.com> wrote in message
>> >>news:1191357676.328164.54550@.50g2000hsm.googlegroups.com...
>> >> > Hello!
>> >> > At some point over the weekend my user account (which is an admin
>> >> > account) lost the ability to perform administrative tasks in SQL
>> >> > Server 2000. I can no longer create a database, create users, modify
>> >> > existing tables, etc. Three days ago I was able to create a database
>> >> > with no problems. The network guy and I are trying to figure out what
>> >> > caused this problem. It seems that all admin accounts have lost these
>> >> > permissions. Does anyone have any suggestions what I can check for?
>|||I'll take a look. I'm suspecting it was someone who didn't know what
they did.
On Oct 4, 9:56 am, "Tibor Karaszi"
<tibor_please.no.email_kara...@.hotmail.nomail.com> wrote:
> > Do you have any ideas what might have caused
> > this?
> Most probably somebody removed it and:
> * Don't remember it
> * Didn't understand what he/she was doing
> * Don't dare to come forward
> I don't recall whether these events are logged to the default profiler trace (see the trc files in
> same folder as where you find the errorlog file), but it is worth a shot to see if you find this
> event there.
> --
> Tibor Karaszi, SQL Server MVPhttp://www.karaszi.com/sqlserver/default.asphttp://sqlblog.com/blogs/tibor_karaszi
> "Jerry" <jerrya...@.gmail.com> wrote in message
> news:1191505654.310090.315540@.k79g2000hse.googlegroups.com...
> > Tibor,
> > I found an account to get in and did find that the group was not in
> > the sysadmin role. This was in the sysadmin role on Friday but on
> > Monday it wasn't there. Do you have any ideas what might have caused
> > this?
> > Thanks for your advice.
> > --
> > Jerry
> > On Oct 4, 7:50 am, "Tibor Karaszi"
> > <tibor_please.no.email_kara...@.hotmail.nomail.com> wrote:
> >> > Unfortunately my account no
> >> > longer has the permissions it needs to check if it's in the sysadmins
> >> > group.
> >> It seems it isn't in the sysadmin group, or you would have been able to check that (assuming you
> >> are
> >> logged in though this Windows group). So you need to go and find somebody who has privileges to
> >> check this...
> >> --
> >> Tibor Karaszi, SQL Server
> >> MVPhttp://www.karaszi.com/sqlserver/default.asphttp://sqlblog.com/blogs/...
> >> "Jerry" <jerrya...@.gmail.com> wrote in message
> >>news:1191500677.281166.191150@.w3g2000hsg.googlegroups.com...
> >> > Thanks for the reply. I checked and the admin group that was set up
> >> > for me is still in the SQL Users list. Unfortunately my account no
> >> > longer has the permissions it needs to check if it's in the sysadmins
> >> > group.
> >> > --
> >> > Jerry
> >> > On Oct 2, 3:46 pm, "Tibor Karaszi"
> >> > <tibor_please.no.email_kara...@.hotmail.nomail.com> wrote:
> >> >> Check out your Logins in SQL Server, whether or not for instance the local Administrators
> >> >> group
> >> >> is
> >> >> still there, and whether it is a member of the sysadmin server role.
> >> >> --
> >> >> Tibor Karaszi, SQL Server
> >> >> MVPhttp://www.karaszi.com/sqlserver/default.asphttp://sqlblog.com/blogs/...
> >> >> "Jerry" <jerrya...@.gmail.com> wrote in message
> >> >>news:1191357676.328164.54550@.50g2000hsm.googlegroups.com...
> >> >> > Hello!
> >> >> > At some point over the weekend my user account (which is an admin
> >> >> > account) lost the ability to perform administrative tasks in SQL
> >> >> > Server 2000. I can no longer create a database, create users, modify
> >> >> > existing tables, etc. Three days ago I was able to create a database
> >> >> > with no problems. The network guy and I are trying to figure out what
> >> >> > caused this problem. It seems that all admin accounts have lost these
> >> >> > permissions. Does anyone have any suggestions what I can check for?

No comments:

Post a Comment