My DBA have a concern about providing "securityadmin" SQL role to any 
account.  He says he is okay with assigning this role during install but 
would like to revoke it once installation is complete.

Wold there be an issue with removing this privilege?  Specifically my 
question is related to the ability to run STSADM and PCCOnfig commands.

Thank you for your help.
-- 
Ashok G

Here is Microsofts detailed doc on the account requirements. Your
post does not say which account you are talking about. SOme accounts
do, some accounts don't need security admin.

The Farm account needs secuirity admin in SQL Server security.
http://technet.microsoft.com/en-us/library/cc262869.aspx

On Mar 11, 6:23=A0pm, Ashok G <Ash...@discussions.microsoft.com> wrote:
> My DBA have a concern about providing "securityadmin" SQL role to any
> account. =A0He says he is okay with assigning this role during install bu=
t
> would like to revoke it once installation is complete.
>
> Wold there be an issue with removing this privilege? =A0Specifically my
> question is related to the ability to run STSADM and PCCOnfig commands.
>
> Thank you for your help.
> --
> Ashok G

Thank you for your response.

Only 2 account need the SQL "securityadmin" rights;  "setup account" and the 
"farm account".  Can the "securityadmin" rights for each of these be removed 
after installation & configuration is complete?  We do need the ability to 
run STSADM commands as well implement customizations (site definitions, 
custom features, web parts, etc).

My concern is that will the environment become unstabe if we revoke the 
"securityadmin" privilieges from both accounts.

Thanks.
-- 
Ashok G


"spconsultant" wrote:

> Here is Microsofts detailed doc on the account requirements. Your
> post does not say which account you are talking about. SOme accounts
> do, some accounts don't need security admin.
> 
> The Farm account needs secuirity admin in SQL Server security.
> http://technet.microsoft.com/en-us/library/cc262869.aspx
> 
> On Mar 11, 6:23 pm, Ashok G <Ash...@discussions.microsoft.com> wrote:
> > My DBA have a concern about providing "securityadmin" SQL role to any
> > account.  He says he is okay with assigning this role during install but
> > would like to revoke it once installation is complete.
> >
> > Wold there be an issue with removing this privilege?  Specifically my
> > question is related to the ability to run STSADM and PCCOnfig commands.
> >
> > Thank you for your help.
> > --
> > Ashok G
> 
> .
> 

These accounts need to maintain this privilege on SQL in order to control 
the access of your users to the data in your SharePoint farm. As you add 
users, these accounts modify the permissions to maintain control. Yes, you 
have to leave it alone.

-- 
Daniel A. Galant

Imagine what we could be... if we could just imagine.

"Ashok G" <AshokG@discussions.microsoft.com> wrote in message 
news:0AB65F31-46C3-4761-84CF-7F6673FAF309@microsoft.com...
> Thank you for your response.
>
> Only 2 account need the SQL "securityadmin" rights;  "setup account" and 
> the
> "farm account".  Can the "securityadmin" rights for each of these be 
> removed
> after installation & configuration is complete?  We do need the ability to
> run STSADM commands as well implement customizations (site definitions,
> custom features, web parts, etc).
>
> My concern is that will the environment become unstabe if we revoke the
> "securityadmin" privilieges from both accounts.
>
> Thanks.
> -- 
> Ashok G
>
>
> "spconsultant" wrote:
>
>> Here is Microsofts detailed doc on the account requirements. Your
>> post does not say which account you are talking about. SOme accounts
>> do, some accounts don't need security admin.
>>
>> The Farm account needs secuirity admin in SQL Server security.
>> http://technet.microsoft.com/en-us/library/cc262869.aspx
>>
>> On Mar 11, 6:23 pm, Ashok G <Ash...@discussions.microsoft.com> wrote:
>> > My DBA have a concern about providing "securityadmin" SQL role to any
>> > account.  He says he is okay with assigning this role during install 
>> > but
>> > would like to revoke it once installation is complete.
>> >
>> > Wold there be an issue with removing this privilege?  Specifically my
>> > question is related to the ability to run STSADM and PCCOnfig commands.
>> >
>> > Thank you for your help.
>> > --
>> > Ashok G
>>
>> .
>> 

Thank you Daniel.  
I will need to present this info to my security folks as well as my DBA.

Thanks once again!
-- 
Ashok G


"Daniel A. Galant" wrote:

> These accounts need to maintain this privilege on SQL in order to control 
> the access of your users to the data in your SharePoint farm. As you add 
> users, these accounts modify the permissions to maintain control. Yes, you 
> have to leave it alone.
> 
> -- 
> Daniel A. Galant
> 
> Imagine what we could be... if we could just imagine.
> 
> "Ashok G" <AshokG@discussions.microsoft.com> wrote in message 
> news:0AB65F31-46C3-4761-84CF-7F6673FAF309@microsoft.com...
> > Thank you for your response.
> >
> > Only 2 account need the SQL "securityadmin" rights;  "setup account" and 
> > the
> > "farm account".  Can the "securityadmin" rights for each of these be 
> > removed
> > after installation & configuration is complete?  We do need the ability to
> > run STSADM commands as well implement customizations (site definitions,
> > custom features, web parts, etc).
> >
> > My concern is that will the environment become unstabe if we revoke the
> > "securityadmin" privilieges from both accounts.
> >
> > Thanks.
> > -- 
> > Ashok G
> >
> >
> > "spconsultant" wrote:
> >
> >> Here is Microsofts detailed doc on the account requirements. Your
> >> post does not say which account you are talking about. SOme accounts
> >> do, some accounts don't need security admin.
> >>
> >> The Farm account needs secuirity admin in SQL Server security.
> >> http://technet.microsoft.com/en-us/library/cc262869.aspx
> >>
> >> On Mar 11, 6:23 pm, Ashok G <Ash...@discussions.microsoft.com> wrote:
> >> > My DBA have a concern about providing "securityadmin" SQL role to any
> >> > account.  He says he is okay with assigning this role during install 
> >> > but
> >> > would like to revoke it once installation is complete.
> >> >
> >> > Wold there be an issue with removing this privilege?  Specifically my
> >> > question is related to the ability to run STSADM and PCCOnfig commands.
> >> >
> >> > Thank you for your help.
> >> > --
> >> > Ashok G
> >>
> >> .
> >>