RE: SQL SA password

From: Damon Sisola (dsisola@osius.com)
Date: 02/15/02


From: "Damon Sisola" <dsisola@osius.com>
To: "'RICH ROHRICH'" <Rich_Rohrich@pgn.com>, <focus-ms@securityfocus.com>
Date: Thu, 14 Feb 2002 15:23:37 -0800

If the SQL Server security is not locked down well, and the default server
roles exist, you can login as an admin on the box and use the Administrators
groups trusted connection (Use Windows Authentication) to get in with the SA
privilege. Then change the SA password as you wish.

-----Original Message-----
From: RICH ROHRICH [mailto:Rich_Rohrich@pgn.com]
Sent: Thursday, February 14, 2002 1:25 PM
To: focus-ms@securityfocus.com
Subject: SQL SA password

Anyone know of a way to retrieve or break the SA password for a SQL database
on a Windows2000 server. We accidently locked ourselves out of a box. If I
should post this elsewhere please let me know.

Rich



Relevant Pages

  • Re: SQL User SID format?
    ... When you move databases to another server, you can remap users to logins ... capability to remap a user to a login with new ALTER USER syntax - I ... The new ALTER USER syntax works for remapping both SQL and Windows ... this means you already have access to a SID from the syslogins catalog; ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Server on XP Home Network
    ... The sa account is the system administrator "God" account witihin SQL ... This account is a SQL-Server login. ... You might be able to use Enterprise Manager to go in and create a new SQL ... Select the "SQL Server Authentication" ...
    (microsoft.public.sqlserver.setup)
  • Microsoft SQL server error:233
    ... Right click on the Instance name - Server Properties ... Restart the SQL Service. ... Login as an Administrator into the SqL Server ... A connection was successfully established with the server, ...
    (microsoft.public.sqlserver.connect)
  • Re: SQL Server 2000 Replication Agents Credentials
    ... the snapshot agent IS using sql login to connect to the ... The pull distribution agent IS using sql ... Do you know where SQL Server 2000 saves the sql ...
    (microsoft.public.sqlserver.replication)
  • Re: Can you update/process AS2005 cube with AMO and SQL authentica
    ... We have cases where the AS server and the Data Source server reside on 2 ... The data source is properly secured using SQL Server ... login and no serious client will accept the login with no password. ...
    (microsoft.public.sqlserver.olap)