Showing posts with label password. Show all posts
Showing posts with label password. Show all posts

Friday, March 30, 2012

How can i restrict the SA user

hi,
Is there any way to restrict the SA access. The problem is that all my
client machine users knows the sa password, and also right now i don't want
to change the password. So i just want to know is there any way to restrict
their access ? thanking in advance
ARHi
SA is not restrictable as it is the highest built in security account.
If security is so important, you have to change the password. Remember, if
you are using integrated security, domain and local admins are by default,
mapped to SA.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Aneesh" <aneesh.r@.eostek.com> wrote in message
news:u4iPss30EHA.2608@.TK2MSFTNGP10.phx.gbl...
> hi,
> Is there any way to restrict the SA access. The problem is that all my
> client machine users knows the sa password, and also right now i don't
want
> to change the password. So i just want to know is there any way to
restrict
> their access ? thanking in advance
> AR
>|||"Aneesh" <aneesh.r@.eostek.com> wrote in message
news:u4iPss30EHA.2608@.TK2MSFTNGP10.phx.gbl...
> hi,
> Is there any way to restrict the SA access. The problem is that all my
> client machine users knows the sa password, and also right now i don't
want
> to change the password. So i just want to know is there any way to
restrict
> their access ? thanking in advance
> AR
Make a new user and give him an appropriate permissions.
regards,
Dra

Wednesday, March 28, 2012

How Can I recover the SA password?

Hi
I´m the SQL administrator, and I want recover the SA password, I do not want
reset it, I want recover.
Thanks and have a nice dayI've never done it but here:
http://www.derkeiler.com/Newsgroups/microsoft.public.sqlserver.security/200=
3-03/0790.html
On Oct 10, 3:24 pm, Oseas Millan
<OseasMil...@.discussions.microsoft.com> wrote:
> Hi
> I=B4m the SQL administrator, and I want recover the SA password, I do not= want
> reset it, I want recover.
> Thanks and have a nice day|||Thanks Pawn.
Let me try
"Pawn" wrote:
> I've never done it but here:
> http://www.derkeiler.com/Newsgroups/microsoft.public.sqlserver.security/2003-03/0790.html
> On Oct 10, 3:24 pm, Oseas Millan
> <OseasMil...@.discussions.microsoft.com> wrote:
> > Hi
> >
> > I´m the SQL administrator, and I want recover the SA password, I do not want
> > reset it, I want recover.
> >
> > Thanks and have a nice day
>
>

Monday, March 26, 2012

How can i protect sqlserver 2000 by password

can any body tell me how can i protec my sqlserver 2000 by a
password so that no other person can open sqlserver 2000You should change passwords to all default User Ids.
To check which once you have, go to Users in Enterprise Manager.

Don't have anyone with NT authentication.

If you need users to be able to access through some front end application but still be prevented from getting directly to the server let me know.

I will provide some more sophisticated approach and preferably in private.

Thank you.|||i just want that no body can open my sqlserver 2000 directly to see
which database i am using and its tables/views etc

but any body can connect it by using programe which i made in
visual basic|||You have to hash passwords for each person before connecting to the server so they wouldn't really know the password that they use.
For the first time they login to your application you have to check if hashed password doesn't work you use sp_password command to change it to hashed password and in the future only hashed version will be used.
Also I provide functionality through my program where they can change their password. What I do, after they change a password I hash it first and then change it. So when they login next time they will again use hashed version and never know actual password to the server.
In this model you can not give NT authentication rights only password protected. Also you can check if the person who is logging in into your computer is the same as NT Login into this computer to provide your own authentication. This measure is made when you don't want people using somebody else's computers to login into your program.

Also all users of your application should be members of some group in my case I created enduser group. This way if you want to grant rights to something in a database that all users have access to from application like a view or stored procedure I just grant rights to that group and everyone has it instantly.
As I said if you wan to go with security model I created I can provide code samples in private.

Thank you.
Good Luck.sql

Sunday, February 19, 2012

How can I find when a password is close to expiring

I am using VB6 with SQL server 2005. In order to implement password expiry properly I need to know how to find out when a user's password is due to expire so that I can output a message to prompt him to change his password. How can I interrogate this information?

http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=1189633&SiteID=1

cheers

U

How can I find when a password is close to expiring

I am using VB6 with SQL server 2005. In order to implement password expiry properly I need to know how to find out when a user's password is due to expire so that I can output a message to prompt him to change his password. How can I interrogate this information?

http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=1189633&SiteID=1

cheers

U