Microsoft KB Archive/75291

= INF: Restricting Access to Master Database in SQL Server =

Article ID: 75291

Article Last Modified on 2/14/2005

-

APPLIES TO


 * Microsoft SQL Server 4.21a Standard Edition
 * Microsoft SQL Server 6.0 Standard Edition
 * Microsoft SQL Server 6.5 Standard Edition
 * Microsoft SQL Server 7.0 Standard Edition
 * Microsoft SQL Server 7.0 Service Pack 1

-



This article was previously published under Q75291



The GUEST username in the master database is necessary for users (other than the system administrator) to log in and should not be removed. If it is removed, a user who does not have an account in the master database can no longer log in to the server. This is the case even if the user has an account in a default database other than the master.

Because the GUEST username should not be removed, there is no way to physically restrict users from the master database. That is, they can still execute the USE MASTER command. However, if the users do not have an account in the master database, they are given access under the GUEST username. To restrict users from accessing or viewing objects, revoke privileges such as SELECT and EXECUTE from the PUBLIC group, of which GUEST is a member.

Additional query words: Security and permissions

Keywords: kbother KB75291

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.