Re: Changing passwords / Blocking SA login attempts

From: BP Margolin (bpmargo@attglobal.net)
Date: 02/12/03 

From: "BP Margolin" <bpmargo@attglobal.net>
Date: Wed, 12 Feb 2003 06:22:36 -0500

Fox,

Changing a Windows password is always completely invisible to SQL Server.

The Windows login is completely separate from a SQL Server login, unless you
are using Windows Authentication.
If you are using SQL Server Authentication, then one doesn't even have to
have a Windows login in order to connect ... for example Unix users and Mac
users could connect to SQL Server via SQL Server Authentication without
having a Windows login.

One can not delete the SA account. One can effectively disable the SA
account by going to Windows Authentication, which tends to be more secure
than Mixed Authentication anyway.

I'm guessing you're logging attempts to connect because you want to see
exactly this type of information ... i.e., potential hackers. If you are not
interested in seeing failed login attempts, you can turn off the logging via
Enterprise Manager: right-click the SQL Server instance name, and choose
Properties, go to the Security tab, and change the audit level.

-------------------------------------------
BP Margolin
Please reply only to the newsgroups.
When posting, inclusion of SQL (CREATE TABLE ..., INSERT ..., etc.) which
can be cut and pasted into Query Analyzer is appreciated.

"Fox" <fox@connexions.net> wrote in message
news:OPAIE$n0CHA.1764@TK2MSFTNGP10...
> I want to tighten security up on my Windows 2000 Server and SQL.
> If I change my PW in Windows, will this mess up my SQL login ?
> Do I need to re-add or change myself in SQL. Also, what about ADMIN.
> I want to change that in Windows as well, will it need to be changed
> somehow in SQL ? Sorry to be dumb, but we all are until we have answers.
> Only been using SQL for a few weeks and I am getting slammed by
> attempts to log in to the tune of thousands a day.
>
> Note: Is there a way to stop any attempts to log into the SA account.
> I am not using it, unless there is some systemic use I am not aware of.
> Is it entirely deletable or will that kill the server ?
>
> They are filling my logs with thousands of entries while doing this.
> It seems automated and runs for a while every day. I would love
> to block these attempts or at least get it out of my logs.
>
> Thanks,
> Fox
>
>

Relevant Pages

  • Re: Slow booting xp home.
    ... Changing the boot order to boot first from your hard disk might save you a half second, but you won't be able to boot from a CD until you change it back - and the time spent to do that will erase any previous time saved. ... 2- Consider what software you really want to start with Windows and also how you've configured your applications at startup ... Installing and Registering Visual Studio Express Editions Smart Device ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Slow booting xp home.
    ... Thirty seconds to boot Windows? ... I read somewhere that Microsoft suggest 30s boot up on xp home, I have seen videos on youtube of 8s boot up on xp, I'd be delighted with 30s and happy just to get below a minute. ... Installing and Registering Visual Studio Express Editions Smart Device ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Microsoft Web Data Administrator
    ... > login USING WINDOWS NT Integrated Security.... ... if you can not connect using SQL Server authentication at all, ...
    (microsoft.public.sqlserver.msde)
  • Re: Remote connection failed
    ... If you are going over a remote connection or are not logging ... into the domain where SQL Server is then no, Windows ... authentication won't work. ...
    (microsoft.public.sqlserver.connect)
  • Re: Security Update for SQL Server 2005 Service Pack 2 (KB948109)
    ... If you're running Windows Live Mail, sign out then close the application. ... Understand that you can open a free support incident about your issues: ... When you call, clearly state that your problem is related to a Security Update and cite the update's KB number. ... SQL Server Database Services 2005 ENU SP2 ...
    (microsoft.public.windowsupdate)