DTS permissions to create

How to I revoke the ability of non-sa non-dbo users from
creating DTS packages on a SQL 2000 server?
Thx!
You could try revoking or denying write permissions to msdb. this is where dts package information is stored I believe.
In theory the creation of a package should fail if it cannot be written to msdb.
"Angelina" wrote:

> How to I revoke the ability of non-sa non-dbo users from
> creating DTS packages on a SQL 2000 server?
> Thx!
>
|||There's no specific stored procedure in msdb that I can
explicity deny that creates the DTS packages?

>--Original Message--
>You could try revoking or denying write permissions to
msdb. this is where dts package information is stored I
believe.
>In theory the creation of a package should fail if it
cannot be written to msdb.[vbcol=seagreen]
>"Angelina" wrote:
from
>.
>
|||Angelina
To prevent users from adding DTS packages, you can deny EXEC permissions on
sp_add_dtspackage. Deny exec on sp_enum_dtspackages should stop users
browsing packages.
HTH,
Paul Ibison
|||Thanks Paul,
Do I Deny the permissions to the guest account.
There are no actual users in the msdb database besides
guest and dbo. Or can I remove the guest account
completely. What's recommended?

>--Original Message--
>Angelina
>To prevent users from adding DTS packages, you can deny
EXEC permissions on
>sp_add_dtspackage. Deny exec on sp_enum_dtspackages
should stop users
>browsing packages.
>HTH,
>Paul Ibison
>
>.
>
|||The rights are inherited by virtue of the guest user and the permissions of
the public role. The way I'd do it is remove (revoke and not deny) the exec
rights from the public role and then create your own role with exec rights
to the 2 procedures I mentioned. If a user needs to be able to use them,
then add him explicitly as a user in MSDB and into your role.
HTH,
Paul Ibison