FIX: You cannot exclude members of the computer Administrators group from the OLAP Administrators group (834419)

SYMPTOMS

The original released version of SQL Server 2000 Analysis Services does not include a way to include or exclude members of the computer Administrators group from the OLAP Administrators group. By default, the OLAP Administrators local Microsoft Windows security group controls Analysis Services administrative rights, and the OLAP Administrators group also includes the members of the Administrators group for the computer where Analysis Services is installed. However, starting with SQL Server 2000 Analysis Services build 8.00.909, you can use a new registry entry that is named ExcludeMachineAdminFromOLAPAdmin to change this behavior.

RESOLUTION

Service pack information

To resolve this problem, obtain the latest service pack for Microsoft SQL Server 2000. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

290211 How to obtain the latest SQL Server 2000 service pack

Hotfix information

The English version of this hotfix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

   Date         Time   Version            Size    File name
   --------------------------------------------------------------
   03-Nov-2003  17:08  8.0.874.0         217,668  Msmdcb80.dll     
   17-Jan-2004  01:47  8.0.0.909       4,063,812  Msmddo80.dll     
   03-Nov-2003  17:08  8.0.874.0       1,032,768  Msmdgd80.dll     
   28-Oct-2003  02:58  8.0.823.0         172,608  Msmdpump.dll     
   28-Oct-2003  02:58  8.0.0.864       9,638,468  Msmdsgn80.dll    
   17-Jan-2004  01:47  8.0.909.0       1,835,588  Msmdsrv.exe      
   17-Jan-2004  01:47  8.0.909.0       2,077,264  Msolap80.dll     
   10-May-2003  08:05  8.0.820.0         213,069  Msolap80.rll

Note Because of file dependencies, the most recent hotfix or feature that contains these files may also contain additional files.

MORE INFORMATION

You can add this new registry entry under the following registry path:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLAP Server\Current Version

The data type for this new registry entry is DWORD. The value that is assigned to the ExcludeMachineAdminFromOLAPAdmin registry entry controls inclusion or exclusion of the members of the local computer Administrators group in the OLAP Administrators group.

The following table describes the effect of the ExcludeMachineAdminFromOLAPAdmin registry entry:

ExcludeMachineAdminFromOLAPAdmin = 1	Users who are part of the Administrators group, but who are not part of the OLAP Administrators group, cannot connect to the Analysis Services computer by using Analysis Manager or by using any other Microsoft Decision Support Objects (DSO) application.
ExcludeMachineAdminFromOLAPAdmin = 0	Users who are part of the local computer Administrators group, but who are not part of the OLAP Administrators group, can connect to the Analysis Services computer by using Analysis Manager or by using any other DSO application.
ExcludeMachineAdminFromOLAPAdmin is not present in the registry	Users who are part of the local computer Administrators group, but who are not part of the OLAP Administrators group, can connect to the Analysis Services computer by using Analysis Manager or by using any other DSO application.

SQL Server 2000 Analysis Services 64-bit

For additional information about a hotfix build that is designed to be applied on a server that is running SQL Server 2000 Analysis Services 64-bit, or to find out if a fix is scheduled to be included in SQL Server 2000 Analysis Services 64-bit Service Pack 4, click the following article number to view the article in the Microsoft Knowledge Base:

825804 FIX: Hotfix information for build 8.0.872 of SQL Server 2000 Analysis Services 64-bit