INF: Restricting Access to Master Database in SQL Server

This article was previously published under Q75291
This article has been archived. It is offered "as is" and will no longer be updated.
The GUEST username in the master database is necessary for users(other than the system administrator) to log in and should not beremoved. If it is removed, a user who does not have an account in themaster database can no longer log in to the server. This is the caseeven if the user has an account in a default database other than themaster.

Because the GUEST username should not be removed, there is no way tophysically restrict users from the master database. That is, they canstill execute the USE MASTER command. However, if the users do nothave an account in the master database, they are given access underthe GUEST username. To restrict users from accessing or viewingobjects, revoke privileges such as SELECT and EXECUTE from the PUBLICgroup, of which GUEST is a member.
Security and permissions

Article ID: 75291 - Last Review: 02/27/2014 21:02:15 - Revision: 3.2

Microsoft SQL Server 4.21a Standard Edition, Microsoft SQL Server 6.0 Standard Edition, Microsoft SQL Server 6.5 Standard Edition, Microsoft SQL Server 7.0 Standard Edition, Microsoft SQL Server 7.0 Service Pack 1

  • kbnosurvey kbarchive kbother KB75291