Currently we have 3 AD users that can log into a Windows Server:
They all logged into the Windows Server 2012 and then does the following:
- MRT\administrator created a SQL instance: MSSQLSERVER
- MRT\adminJohn created a SQL instance: MYPROD_INSTANCE
- MRT\adminAlice created a SQL instance: MYPROD_INSTANCE2
The problem is adminJohn can restart/stop/start adminAlice's SQL instance and vice versa.
How can I restrict them from restarting/stopping/starting other instances (SQL Server, SQL Agent and other services) from both the SSMS and SQL Configuration Manager?
I tried adding a LogOn account to the service but they can still restart, stop, start each other services.