Re:can a sysadmin change the win2000 domain admin password ?

From: Vishal Parkar (vgparkar@hotmail.com)
Date: 02/10/03 

From: "Vishal Parkar" <vgparkar@hotmail.com>
Date: Mon, 10 Feb 2003 05:14:34 -0800

execute permission on xp_cmdshell is by default granted to
sysadmin server role members. So if a user is a member of
sysadmin then he can execute xp_cmdshell.

You can use "net user" command line utility to change the
password for a particular user from command prompt.

--Vishal

>-----Original Message-----
>Hi Vishal,
>what i meant is by using 'xp_cmdshell' can a sysadmin
>change the Win2k/NT admin password for the current domain
>or other domain ???
>ie does the SQL server installation have enough
>privilidges to do that ?
>
>thanks 4 ur answer anyways
>chow
>sniper
>
>>-----Original Message-----
>>Windows 2000 Login account's password is authenticated
by
>>windows and not by SQL Server. Windows account is
>>administered only at OS lever and not at SQL Server
>level.
>>SQL Server only checks the roles and permissions granted
>>to the account on the basis of Authentication(Mixed
mode/
>>SQL Only) to access SQL Server.
>>
>>--Vishal.
>>
>>>-----Original Message-----
>>>Hi,
>>>My query is simple ...we know that the
>>>Builtin\Administrator account can change the sa
password
>>>or reset it right
>>>is the reverse possible ????
>>>especially of a win2k domain ?
>>>can a sysadmin change the win2000 domain administrator
>>>password ?
>>>
>>>any or some help will be appreciated !!
>>>sniper
>>>.
>>>
>>.
>>
>.
>

Relevant Pages

  • Re: permissions required for executing CDOSys stored procedures
    ... he is by default member of the sysadmin server ... role on the SQL Server database unless steps are taken to prevent that. ... sysadmin and who has not been granted specific execute permissions on the ... it is possible to GRANT EXECUTE ON sp_OACreate TO ...
    (microsoft.public.sqlserver.security)
  • Re: Sharepoint index problems in SQL Server.
    ... The Administrator account is a sysadmin and have all the access to all the ... > database is master and language US_English? ... >> I've set back the account localsystem for both SQL Server and Microsoft ...
    (microsoft.public.sqlserver.fulltext)
  • Re: Move or Setup of SQL Database toa Remote Server Fails
    ... as well as have SysAdmin privileges on the DB. ... Registered type 501ST MASTER for 501ST SCCM1DB\master ... Could not connect SQL Server 'master' db. ... The SCCM Primary Site Computer Account and the User account I am using ...
    (microsoft.public.sms.setup)
  • Re: order of columns
    ... If you are sysadmin, you will be able to set an option that will allow you to perform direct ... Tibor Karaszi, SQL Server MVP ... >>> CREATE TABLE tblRichTest1( ...
    (microsoft.public.sqlserver.programming)
  • Re: cannot acees two databases as owner
    ... member of the built-in group Administrators, is not sysadmin. ... Administrator of SQL Server. ...
    (microsoft.public.sqlserver.setup)