Friday, March 30, 2012
How can i restrict the SA user
Is there any way to restrict the SA access. The problem is that all my
client machine users knows the sa password, and also right now i don't want
to change the password. So i just want to know is there any way to restrict
their access ? thanking in advance
ARHi
SA is not restrictable as it is the highest built in security account.
If security is so important, you have to change the password. Remember, if
you are using integrated security, domain and local admins are by default,
mapped to SA.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Aneesh" <aneesh.r@.eostek.com> wrote in message
news:u4iPss30EHA.2608@.TK2MSFTNGP10.phx.gbl...
> hi,
> Is there any way to restrict the SA access. The problem is that all my
> client machine users knows the sa password, and also right now i don't
want
> to change the password. So i just want to know is there any way to
restrict
> their access ? thanking in advance
> AR
>|||"Aneesh" <aneesh.r@.eostek.com> wrote in message
news:u4iPss30EHA.2608@.TK2MSFTNGP10.phx.gbl...
> hi,
> Is there any way to restrict the SA access. The problem is that all my
> client machine users knows the sa password, and also right now i don't
want
> to change the password. So i just want to know is there any way to
restrict
> their access ? thanking in advance
> AR
Make a new user and give him an appropriate permissions.
regards,
Dra
Wednesday, March 28, 2012
How Can I recover the SA password?
I´m the SQL administrator, and I want recover the SA password, I do not want
reset it, I want recover.
Thanks and have a nice dayI've never done it but here:
http://www.derkeiler.com/Newsgroups/microsoft.public.sqlserver.security/200=
3-03/0790.html
On Oct 10, 3:24 pm, Oseas Millan
<OseasMil...@.discussions.microsoft.com> wrote:
> Hi
> I=B4m the SQL administrator, and I want recover the SA password, I do not= want
> reset it, I want recover.
> Thanks and have a nice day|||Thanks Pawn.
Let me try
"Pawn" wrote:
> I've never done it but here:
> http://www.derkeiler.com/Newsgroups/microsoft.public.sqlserver.security/2003-03/0790.html
> On Oct 10, 3:24 pm, Oseas Millan
> <OseasMil...@.discussions.microsoft.com> wrote:
> > Hi
> >
> > I´m the SQL administrator, and I want recover the SA password, I do not want
> > reset it, I want recover.
> >
> > Thanks and have a nice day
>
>
Monday, March 26, 2012
How can i protect sqlserver 2000 by password
password so that no other person can open sqlserver 2000You should change passwords to all default User Ids.
To check which once you have, go to Users in Enterprise Manager.
Don't have anyone with NT authentication.
If you need users to be able to access through some front end application but still be prevented from getting directly to the server let me know.
I will provide some more sophisticated approach and preferably in private.
Thank you.|||i just want that no body can open my sqlserver 2000 directly to see
which database i am using and its tables/views etc
but any body can connect it by using programe which i made in
visual basic|||You have to hash passwords for each person before connecting to the server so they wouldn't really know the password that they use.
For the first time they login to your application you have to check if hashed password doesn't work you use sp_password command to change it to hashed password and in the future only hashed version will be used.
Also I provide functionality through my program where they can change their password. What I do, after they change a password I hash it first and then change it. So when they login next time they will again use hashed version and never know actual password to the server.
In this model you can not give NT authentication rights only password protected. Also you can check if the person who is logging in into your computer is the same as NT Login into this computer to provide your own authentication. This measure is made when you don't want people using somebody else's computers to login into your program.
Also all users of your application should be members of some group in my case I created enduser group. This way if you want to grant rights to something in a database that all users have access to from application like a view or stored procedure I just grant rights to that group and everyone has it instantly.
As I said if you wan to go with security model I created I can provide code samples in private.
Thank you.
Good Luck.sql
Sunday, February 19, 2012
How can I find when a password is close to expiring
http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=1189633&SiteID=1
cheers
U
How can I find when a password is close to expiring
http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=1189633&SiteID=1
cheers
U