Re: How to remove `guest' as Default Login ID in MSSQL2000?

From: Russell Fields (rlfields@sprynet.com)
Date: 11/20/02


From: "Russell Fields" <rlfields@sprynet.com>
Date: Wed, 20 Nov 2002 11:44:29 -0500


Ann,

"guest" is not a login but is a database user. The following is from the
BOL:
--------
The guest user account allows a login without a user account to access a
database. A login assumes the identity of the guest user when both of the
following conditions are met:

* The login has access to an instance of Microsoft® SQL ServerT but does not
have access to the database through his or her own user account.

* The database contains a guest user account.
--------

Therefore, you can drop the guest user from any database that you do not
want accessed in this way. Then the above condition would not allow anyone
to gain access to the database. (It is also possible to leave the guest
account and deny it all (or almost all) rights.)

Russell Fields

"Ann Yong He" <annyh79@hotmail.com> wrote in message
news:b42f01c29083$5a696f90$89f82ecf@TK2MSFTNGXA01...
> Hi, I would like to change the default login id from guest
> to another id (or null). Please advise on how I can do
> this, as this can't be done in Enterprise Manager (like
> version 6.x).



Relevant Pages

  • Re: Script A Login
    ... exacutes a number of stored procedures against the database, ... Login and User ... I restore databases all the time and don't need to re-create logins or ... The user account should have been in the database ...
    (microsoft.public.sqlserver.security)
  • Re: Script A Login
    ... When you create a Windows Login it identifies that Login by using the windows account SID which is unique. ... So you can take a DB from any server and plop it down (restore it) on any other server and the two will always match up. ... When I restore a database, all of the database User Accounts and Database Roles are restored. ... When I restore a backup, are you saying the connection between the SQL Login in the server and the User Account in the database is broken? ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Default Login?
    ... Would it pose a security concern if the default login is ... I mean having a guest user is as good as allowing ... >they haven't been explicitly granted database access. ...
    (microsoft.public.sqlserver.security)
  • Re: db_datareader role**
    ... To see if the guest user is enabled in a particular database: ... >> A login can access a database only if the login is a user in the ... >> The public role has SELECT permissions on system tables and views. ...
    (microsoft.public.sqlserver.security)
  • Re: Application Role and access to other databases
    ... > databases (using a single login), and then restore the database that I ... You can change the owner of an existing database with sp_changedbowner. ... > both a SQL Server Login account and an integrated login, ... > such users don't have access to the database with only a guest user ...
    (microsoft.public.sqlserver.security)