Access to all Servers with Query Account

[Burnjack]

My problem is that everyone with Serveradmin rights can create a ServerQuery Login. With this Login it is possible to edit any of my virtual servers.
How can i disable this?
It should only be possible to edit the virtualserver on which the QueryLogin was created.

[Alcazar]

Dont think that normal SA can edit any server using ServerQuery.
Anyway you should remove the "b_virtualserver_select" permission from SA group, if set.
Or if they shouldnt be able to create a Login at all, remove "b_client_create_modify_serverquery_login" permission.

[azzy101]

i logged into query with default serveradmin status, i requested a query password and the server issued me one, i could login. I could stop the server i was on, but i could not do anything else. Wierdly though the Access to serverquery for SA's is greyed out, yet they can still log in?

i had to go into shell when it said i didnt have permission to start the server ( even though i could stop it)

[Burnjack]

Dont think that normal SA can edit any server using ServerQuery.
Anyway you should remove the "b_virtualserver_select" permission from SA group, if set.
Or if they shouldnt be able to create a Login at all, remove "b_client_create_modify_serverquery_login" permission.

No SA group have the right "b_virtualserver_select". However, they can edit all settings on the other virtualservers...

[Conreason]

Alcazar want to explain you, that you must remove the right "b_virtualserver_select", if you want, that the group can't edit the other virtual server!

Conreason

[Burnjack]

Alcazar want to explain you, that you must remove the right "b_virtualserver_select", if you want, that the group can't edit the other virtual server!

Conreason

But the servergroup "Server Admin" does not have this permission!
If i want to delete it via serverquery i get this error:

servergroupdelperm sgid=38 permid=8469
error id=1283 msg=database\sno\smodifications

[Conreason]

First, you copy this code and change the corresponding:

login serveradminname serveradminpassword

Second, you copy this code and change the corresponding:

servergroupaddclient sgid=2 cldbid={Your client database id here}

Now you have full admin rights because you are now in the serverquery group! Now if you want, that the group XYZ haven't the right to edit other server you go to...

Server Group -> Virtual Server -> Select a virtual server (Value: 0)

That's it!

Conreason

[Burnjack]

after this i get the error "database invalid constraint" if i want to create a ServerQuery Login.

[Burnjack]

Please help me...the problem is not solved so far.