| Author |
Messages |
|
DBADave (guest)
 |
| 08/05/2008 12:15 PM |
 Quote
 Reply
 Alert
|
Developers would like to use the Debugger tool available with Visual Studio, however MS says the tool requires sysadmin permission. We don't like to grant sysadmin permission to developers, even in development. Is it possible to grant sysadmin to an account and then deny various permissions? I tried doing this, but it does not appear possible. Unlike AD security, which considers DENY statements even with domain admin permission, SQL Server appears to ingore the DENY statements when an account has sysadmin.
Dave |
|
|
|
|
Chip Andrews
Posts:113
|
| 09/01/2008 9:07 PM |
Quote
Reply
Alert
|
| I am currently not aware of any way to do this. The way I have most seen it handled is to create an environment (as of late usually implemented via a virtual machine) for developers to use solely for this purpose. Additionally, they can also debug on the SQL Server installed installed on their local machines assuming that is allowed. With the proper mix of firewalls and selective netlibs local installed can be contained and controlled. |
|
|
|
|
|