Server public Permissions
Applies To: SQL Server 2016
This rule determines whether the public server role has server permissions. Every login that is created on the server is a member of the public server role. If this condition is met, every login on the server will have server permissions.
Do not grant server permissions to the server public role.