This project has moved. For the latest updates, please go here.

Previous Setup File Permissions Manual Install Setup WMI Permissions Next

Setup DBA Registry Permissions

FineBuild will Setup Registry Permissions for DBAs so they can access the SQL Server folders.

The Microsoft SQL Server install will set explicit registry security on the objects created during the install, overwriting any existing permissions. The assigned permissions allow local Administrator access but do not allow access to the DBA groups. FineBuild updates these permissions so that the DBA groups do have access, allowing DBA staff to perform their proper administrative functions on SQL Server.

Permissions need to be set up on the following registry keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server
HKEY_LOCAL_MACHINE\SOFTWARE\MSSQLServer

FineBuild Setup Registry Permissions

FineBuild will automatically Setup Registry Permissions to allow DBAs to access the SQL Server registry keys.

The Setup Registry Permissions processing relates to Process Id 2CAI.

FineBuild also uses the following parameters to help Setup Registry Permissions:
Parameter Default Value Description
GroupDBA none Name of DBA Windows group for sysadmin access
GroupDBANonSA none Name of DBA Windows group for low privilege access

Top

Manual Setup Registry Permissions

The following steps show what you would have to do to Setup Registry Permissions manually. FineBuild does all of this work for you automatically.

The following process will allow DBA staff to access the specified SQL Server registry keys. If you are using Windows 2003 and you did not Install Windows 2003 KB933789, the registry permissions processing will be bypassed.

1) Open the Registry Editor by Start -> Run and type regedit
Regedit Start.png
2) Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server. You will see a display similar to that below. Right click on the registry key and select Permissions:
HKLMPermissions.png
3) Click on Add.
AddPermissions.png
4) Enter the DBA sysadmin group, click on Check Names and then click on OK.
DBAGroup.png
5) Set the authorities to Full Control and click on Apply.
FullControl.png
6) Repeat steps 4) and 5), using the DBA Non-sysadmin group. Set the authorities to Read and click on OK.
Read.png
7) Repeat all the above process, using the registry key HKEY_LOCAL_MACHINE\SOFTWARE\MSSQLServer.

Copyright FineBuild Team © 2013 - 2016. License and Acknowledgements
Previous Setup File Permissions Top Setup WMI Permissions Next

Last edited Aug 27, 2016 at 12:58 PM by EdVassie, version 2