SQL Spider question

From: Gu1tarb0y@aol.com
Date: 05/22/02 

Date: Wed, 22 May 2002 12:59:56 -0400
From: Gu1tarb0y@aol.com
To: focus-ms@securityfocus.com

re:....... If any of you have MS SQL servers with blank SA account passwords, you might have a long day ahead of you...

Pardon this unenlightened question: As part of a project, CA Unicenter was loaded on one of my NT 4.0 servers. It has SQL 7 loaded. I see no NT IDs created during the SQL installation. What is the default SQL admin account name and where would I find it. I expanded the SOL server group info and looked at security\logins. There are number of accounts.
EX:
Name Type Default Database User

cadb Standard master dbo
sa Standard master dbo
tng Standard TNGDB tng
tngsa Standard TNGB dbo

If I was to guess that one of these was the admin account, I'd guess sa.
Let's say I find the account and want to add a password, what processes will this affect? As in.... do I need to go and add this info to start up parms on services or re-establish a process to use this account AND it's new password?

Jim McFarlen

life is intense....improvise

Relevant Pages

  • Re: How good is Comodo Internet Security?
    ... Admin account + web browser + LUA token ... admin account opposed of running as iam now, which is JUST PURE admin level? ... While LUA gives added security, ... payload delivered by a buffer overrun (assuming the app was allowed to ...
    (comp.security.firewalls)
  • Re: domain admin account impersontating
    ... i guees that the bottom line is that the domain admin account can be ... with the same username and password. ... Starting with Windows XP this became less simple, ...
    (microsoft.public.windows.server.security)
  • RE: runas issue
    ... to Power Users per new company policy,so then only one local built-in admin ... user account was at one time an admin account and was changed to power user. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Virus is getting domain account listing
    ... In 2003 you can change the process ID of the admin account. ... Play with the net user command at your command prompt and see what ... dictionary attack against every single account could happen. ...
    (Focus-Microsoft)
  • Re: How to restore Admin account??
    ... Remote Operator group from Administrator User. ... SBS 2003 by default don't allow the Admin account to logon through TS? ... "Frank McCallister SBS MVP" wrote: ...
    (microsoft.public.windows.server.sbs)