Re: Login without password

From: Donna Lambert [MS] (dlambert@online.microsoft.com)
Date: 08/13/02


From: dlambert@online.microsoft.com (Donna Lambert [MS])
Date: Tue, 13 Aug 2002 14:32:41 GMT


Sue,
Once again you are 100% accurate!
Sarah, Sue has provided you with great resources to resolve your issue. If
you have any questions or need to expedite getting this resolved, please
contact Product Support. Otherwise, you should be in good with the advice
Sue provided!

Thanks,
Donna Lambert
Microsoft SQL Server Support

Disclaimer:
This posting is provided “AS IS” with no warranties, and confers no rights.

Are you secure? For information about the Microsoft Strategic Technology
Protection Program and to order your FREE Security Tool Kit, please visit
http://www.microsoft.com/security.

Recent viruses on the Internet underscore the threat to all computer users
and highlight challenges facing the entire industry in providing security
that everyone needs to conduct business. I encourage you to sign up to
receive automatic notification of Microsoft Security Bulletins by visiting
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
bulletin/notify.asp. For more information on security, our Strategic
Technology Protection Program and to order your FREE Security Tool Kit,
please visit http://www.microsoft.com/security. We will be happy to answer
any questions or provide assistance with your security needs.

--------------------
| From: Sue Hoegemeier <Sue_H@nomail.please>
| Subject: Re: Login without password
| Date: Mon, 12 Aug 2002 11:23:33 -0600
| Message-ID: <ghrfluo8qhap4g1d613keof4eupa3j2pki@4ax.com>
| References: <488801c23915$05c44340$2ae2c90a@phx.gbl>
<erzunobOCHA.2048@tkmsftngp08> <0f2c01c241d9$7ab0a1e0$3bef2ecf@TKMSFTNGXA10>
| X-Newsreader: Forte Agent 1.91/32.564
| MIME-Version: 1.0
| Content-Type: text/plain; charset=us-ascii
| Content-Transfer-Encoding: 7bit
| Newsgroups: microsoft.public.sqlserver.security
| NNTP-Posting-Host: 67.234.218.61
| Lines: 1
| Path: cpmsftngxa08!cpmsftngxa10!tkmsftngp01!tkmsftngp08
| Xref: cpmsftngxa08 microsoft.public.sqlserver.security:7531
| X-Tomcat-NG: microsoft.public.sqlserver.security
|
| It sounds like you have orphaned users. You may want to
| refer to the following articles:
| PRB: "Troubleshooting Orphaned Users" Topic in Books Online
| is Incomplete
| http://support.microsoft.com/?scid=kb;en-us;Q274188
| PRB: User Logon and/or Permission Errors After Restoring
| Dump
| http://support.microsoft.com/?scid=kb;en-us;Q168001
| INF: How to Resolve Permission Issues When a Database is
| Moved Between SQL Servers
| http://support.microsoft.com/?scid=kb;en-us;Q240872
|
| -Sue
|
| On Mon, 12 Aug 2002 01:23:04 -0700, "Sarah" <sarah@hkpc.org>
| wrote:
|
| >Thanks Margolin for your reply. But I've tried to search
| >for the user/login in the guest, but it doesn't exist.
| >How can I delete the login and add it back? It's a great
| >problem for me now because if hackers know the username,
| >they can easily login without the password.
| >
| >>-----Original Message-----
| >>Sarah,
| >>
| >>Check out the section "guest User" in the SQL Server 7.0
| >Books Online.
| >>
| >>-------------------------------------------
| >>BP Margolin
| >>Please reply only to the newsgroups.
| >>When posting, inclusion of SQL (CREATE TABLE ...,
| >INSERT ..., etc.) which
| >>can be cut and pasted into Query Analyzer is appreciated.
| >>
| >>"Sarah" <sarah@hkpc.org> wrote in message
| >>news:488801c23915$05c44340$2ae2c90a@phx.gbl...
| >>> My SQL Server is version 7.0. I migrate the server from
| >>> one old server to a new one, but it is still SQL Server
| >>> 7.0. However after the migration, some users can login
| >>> into the server without a password or with a wrong
| >>> password. I found that the user is disappeared
| >>> from "Login", but when I open a role and I can see that
| >>> user under that role. In this way, since the user
| >doesn't
| >>> displayed out as a login, I cannot delete it. But when
| >I
| >>> try to add a new login to set a new password, the server
| >>> stated that the user already exists. what should I
| >do? I
| >>> need to solve this problem in a very short time. Please
| >>> help me. Thanks a lot!!!
| >>
| >>
| >>.
| >>
|
|



Relevant Pages

  • Re: Unknown Domain user - domain authentication appears limited
    ... (using cached login). ... Microsoft MVP (Windows Server System: Security) ... > due to the following error: Logon failure: the user has not been granted ...
    (microsoft.public.windows.server.security)
  • RE: Penetration test of 1 IP address
    ... I have been asked to perform a security audit of 1 IP address ... You could grab the banner of the HTTP server or run p0f (if you are using ... Another test would be trying to login as ie admin with the company's name ... Audit your website security with Acunetix Web Vulnerability Scanner: ...
    (Pen-Test)
  • Re: Well done HSBC
    ... The security firm know ... the server usually lets you have a couple of time units either way. ... If login fails and then succeeds, ... security code. ...
    (uk.comp.sys.mac)
  • Pen testing a CVS server
    ... Im pentesting a server, which is running CVSpserver. ... have gone through the CVS documentation and read other ... trying to login to the pserver with the ... wireless LANs require network security policies ...
    (Pen-Test)
  • Re: DNS error message after update
    ... > Ater updating my server 2000 with the latest MS security, ... > returned is data DWORD 0. ... > Any ideas as to how I can resolve this. ...
    (microsoft.public.win2000.dns)