Share via

Unable to do database backups due to user account permission

Kaplan, Andrew H 226 Reputation points
2025-11-17T18:25:26.8166667+00:00

We are running a SQLExpress 2012 server and are currently unable to do backups of a given database due to privileges. The logins that are available on the server are the following:

BUILTIN\Users sa

The Users group has public access, and the sa user has sysadmin access. However, the sa user is disabled. We have tried enabling the sa user through the GUI as well as using a T-SQL query. Neither has been successful.

Is there a way to either elevate the Users server role to sysadmin, or to enable the sa account?

SQL Server Database Engine
0 comments No comments

Answer recommended by moderator

  1. Erland Sommarskog 134K Reputation points MVP Volunteer Moderator
    2025-11-17T18:56:14.79+00:00

    You should follow the procedures in this article:

    https://learn.microsoft.com/en-us/sql/database-engine/configure-windows/connect-to-sql-server-when-system-administrators-are-locked-out?view=sql-server-ver17

    However, you should not enable sa, and you should absolutely not add BUILTIN\Users to sysadmin!

    Rather, you should designate a person, or even better an AD group who is to be sysadmin. Then this person (or group of persons) can hand out permissions as needed.

    Was this answer helpful?


1 additional answer

Sort by: Most helpful
  1. Q&A Assist
    2025-11-17T18:25:52.7933333+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    To resolve the issue of being unable to perform database backups due to user account permissions in SQL Server Express 2012, you have a couple of options:

    1. Enable the sa Account: Since the sa account is disabled, you need to enable it to regain access. If you are unable to enable it through the GUI or T-SQL, you might need to start SQL Server in single-user mode to reset the password or enable the account. This can be done by:
      • Stopping the SQL Server service.
      • Starting the service from the command line with the -m option to enable single-user mode.
      • Connecting to the instance using SQLCMD or another tool and executing the command to enable the sa account:
             ALTER LOGIN sa ENABLE;
        
      • After enabling, set a strong password for the sa account:
             ALTER LOGIN sa WITH PASSWORD = 'YourStrongPassword';
        
      • Restart the SQL Server service normally.
    2. Elevate BUILTIN\Users Role: While you cannot directly elevate the BUILTIN\Users group to sysadmin, you can create a new login with sysadmin privileges. If you have access to the sa account or another account with sufficient privileges, you can execute:
         CREATE LOGIN [NewAdmin] FROM WINDOWS;
         EXEC sp_addsrvrolemember 'NewAdmin', 'sysadmin';
      
      This will allow the new user to have full administrative access.

    If you are unable to perform these actions due to lack of access, you may need to consult with someone who has administrative privileges on the server or consider reinstalling SQL Server with appropriate permissions set during installation.


    References:

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.