Re: SQL Default Login?

From: Audrey Lim (robwhitz@yahoo.com)
Date: 11/14/02 

From: "Audrey Lim" <robwhitz@yahoo.com>
Date: Wed, 13 Nov 2002 23:58:25 -0800

Hi,

Would it pose a security concern if the default login is
guest? I mean having a guest user is as good as allowing
annoymous access.

Regards,
Audrey

>-----Original Message-----
>The guest database user provides logins with a security
context when
>they haven't been explicitly granted database access.
This is needed
>for master and tempdb so that you don't need to grant
every login access
>to these shared databases.
>
>You can ignore the default login reported by
xp_loginconfig. This is
>not related to the guest database user and is provided
only for
>backwards compatibility.
>
>--
>Hope this helps.
>
>Dan Guzman
>SQL Server MVP
>
>-----------------------
>SQL FAQ links (courtesy Neil Pike):
>
>http://www.ntfaq.com/Articles/Index.cfm?DepartmentID=800
>http://www.sqlserverfaq.com
>http://www.mssqlserver.com/faq
>-----------------------
>
>"Audrey Lim" <robwhitz@yahoo.com> wrote in message
>news:f90801c28b6b$4331e4a0$37ef2ecf@TKMSFTNGXA13...
>> I executed the stored procedure 'xp_loginconfig' in the
>> Master Database. It shows that the default login for
the
>> database is guest user. I understand that the guest
user
>> can be deleted and added to all databases except master
>> and tempdb, where it must always exist.
>>
>> A few questions:-
>> - What is the main purpose of guest in both master and
>> tempdb?
>> - Can I change the default login to another account in
>> both master database without revoking the guest user?
>>
>> I would appreciate any advise on the above questions.
>>
>> Thanks,
>> Audrey
>>
>
>
>.
>

Relevant Pages

  • Re: SQL Default Login?
    ... A user needs a valid account (SQL Server login, ... the user can access only those database they ... have been explicitly granted access to plus those with the guest user. ...
    (microsoft.public.sqlserver.security)
  • Re: Guest Account
    ... The guest accout is a way for people to access a database - NOT the sever. ... There is no login that is directly associated with guest... ... As for the guest account in Northwind/Pubs - yes, ...
    (microsoft.public.sqlserver.security)
  • Re: How to remove `guest as Default Login ID in MSSQL2000?
    ... "guest" is not a login but is a database user. ... The guest user account allows a login without a user account to access a ... A login assumes the identity of the guest user when both of the ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Default Login?
    ... The guest database user provides logins with a security context when ... they haven't been explicitly granted database access. ... You can ignore the default login reported by xp_loginconfig. ... > Master Database. ...
    (microsoft.public.sqlserver.security)
  • Re: fedora 9/10 Guest account?
    ... When trying to login at the Guest user: ... SELinux denied access requested by dbus-daemon. ...
    (Fedora)