Rights to start SQL services

Hi all,
In my ongoing PAIN of SOX, I am in the middle of SA DBA split of duties.
I have 2 different accounts that start my SQL Services, I have one account
that starts SQL server service and another to start SQL agent. I know these
accounts need to have SA rights to the server. Is there a way to revoke
rights in the individual databases? As SA even if I maunaully revoke the
delete rights to a table I can still log on as them and delete records.
TIA,
JoeYou can't deny rights in SQL Server to a member of
sysadmins. Sysadmin members can perform any action in SQL
Server and bypass any denies you may set up.
-Sue
On Mon, 1 Aug 2005 09:01:03 -0700, jaylou
<jaylou@.discussions.microsoft.com> wrote:

>Hi all,
>In my ongoing PAIN of SOX, I am in the middle of SA DBA split of duties.
>I have 2 different accounts that start my SQL Services, I have one account
>that starts SQL server service and another to start SQL agent. I know thes
e
>accounts need to have SA rights to the server. Is there a way to revoke
>rights in the individual databases? As SA even if I maunaully revoke the
>delete rights to a table I can still log on as them and delete records.
>TIA,
>Joe