Re: Locking down database accounts

From: BP Margolin (bpmargo@attglobal.net)
Date: 01/13/03 

From: "BP Margolin" <bpmargo@attglobal.net>
Date: Mon, 13 Jan 2003 14:11:59 -0500

Coby,

Not real sure that I understand your post, but taking a stab at it ... use
Windows Authentication rather than SQL Server user accounts and passwords.
Section "Authentication Modes" (adminsql.chm::/ad_security_47u6.htm) in the
SQL Server 2000 Books Online has arguments for choosing Windows
Authentication over SQL Server user accounts and passwords.

-------------------------------------------
BP Margolin
Please reply only to the newsgroups.
When posting, inclusion of SQL (CREATE TABLE ..., INSERT ..., etc.) which
can be cut and pasted into Query Analyzer is appreciated.

"Coby" <Coby_Hamilton@administaff.com> wrote in message
news:4e7b01c2bb33$d86f1540$8af82ecf@TK2MSFTNGXA03...
> What's the easiest way to lock down database user accounts
> and passwords for applications to access? We don't want
> them sitting around in an .xml file and we would rather
> avoid encrypting them because then clients would require
> additional configuration. Is there a happy, safe medium?
> Thanks.
>

Relevant Pages

  • Re: Convert SQL logins to Windows authentication
    ... SQL Server doesn't store passwords for Windows authenticated accounts since ... > SQL accounts...is there a known script/utility that can transfer the SQL> login passwords to the new corresponding Windows Authentication passwords? ...
    (microsoft.public.sqlserver.security)
  • RE: Secure Logins for SQL Server 2000 on Novell Netowrk
    ... all the traffic to and from the client ... Is there a way I can use Windows authentication on the SQL server? ... you have to duplicate usernames and passwords on the machines. ...
    (microsoft.public.sqlserver.security)
  • Re: Convert SQL logins to Windows authentication
    ... > SQL Server doesn't store passwords for Windows authenticated accounts ... > grant the existing Windows accounts access to SQL Server, ... >> login passwords to the new corresponding Windows Authentication ...
    (microsoft.public.sqlserver.security)
  • Re: What are the implications of joining a domain
    ... I'll assume you're asking about SQL server and or Windows authentication on ... | I plan to but I am also concerned about the impact on user accounts. ...
    (microsoft.public.win2000.general)
  • Re: Login failed for user MachineNameASPNET
    ... If you are using Windows Authentication for the site, ... Or is your SQL Server not on the same network? ... Really impersonation is the best way, but I do remember a Visual Studio ... > user name to the SQL Server user accounts. ...
    (microsoft.public.dotnet.framework.aspnet)