Re: How to restrict access to database to only IUSR_<machinename>

From: Mark Findlay (mfindlay_at_speakeasy.org)
Date: 01/14/05


Date: Thu, 13 Jan 2005 21:58:40 -0800


>>Do you mean you have performed the following steps?
Yes, that is correct. When I did that, and rebooted the machine, the
SQLServerAgent would not start. (It would start, then immediately stop).
Therefore I could not open my database using Enterprise Manager.
NOTE: I had also set the 'Hide Server' switch, and suspect this may have
been part of the problem as well.

SOLUTION: I went into the registry under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL
Server\MIRACLECAT\MSSQLServer\SuperSocketNetLib\Tcp and set the TcpHideFlag
back to zero and then rebooted and all worked again.

I think I may just depend on Windows Server 2003 blocking post 1433 (SQL
Server Port) and let it go at that since temporarily losing my SQL databases
put quite a scare into me :)

Thanks for all your help however.

Mark

"Sophie Guo [MSFT]" <v-sguo@online.microsoft.com> wrote in message
news:HCsqCPf%23EHA.3360@cpmsftngxa10.phx.gbl...
> Hello Mark,
>
> Thanks for your message.
>
> What do you mean " I removed TCP/IP and Named Pipes from the SQL Server
> Registration from within Enterprise Manager and rebooted the machine."?
> Do
> you mean you have performed the following steps?
>
> 1. Right-click 'MYSERVER\SERVER' in SQL Enterprise Manager(SEM), click
> Properties.
> 2. Click General tab in the Properties window, click Network
> Configuration.
> 3. Remove TCP/IP and Named Pipes from the "SQL Server Network Utility."
>
> Please let me know what steps you performed.
>
> If SQL Server service didn't start, SQL Server Agent service will not be
> started. Please make sure the SQL Server service has been started. You can
> follow the steps below to start SQL Server service:
>
> Click Start > All Programs > SQL Server > Service Manager > start SQL
> Server service in Service Manager > start SQL Server Agent service in
> Service Manager
>
> If you still are unable to start the SQL Server Agent service, please
> follow the steps below to attempt to start the SQL Server Agent Services
> from a command line, then send the error log files to me.
>
> 1. Open a command line window.
> 2. Run the following command in the command line window:
>
> "C:\Program Files\Microsoft SQL Server\<instance
> name>\Binn\sqlagent" -c -v
>
> Note: Above command is just a sample. You need to replace the directory
> "C:\Program Files\Microsoft SQL Server\<instance name>\ with the real
> directory which you installed the SQL Server.
>
> 3. Compress all the log files under the directory "C:\Program
> Files\Microsoft SQL Server\<instance name>\LOG" and send it to me for
> research.
>
>
> In addition, you can open "SQL Server Network Utility." by clicking Start
> >
> All Programs > SQL server > SQL Server Network Utility, then you can
> re-enable TCP/IP and Named Pipes in the SQL Server Network Utility.
>
> If anything is unclear, get in touch.
>
> Sophie Guo
> Microsoft Online Partner Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>



Relevant Pages

  • Problems connecting to SQL Server after installation
    ... I set it to start SQL Server and the Agent using the local System Account ... But every time I try to restart the Agent - I get: ... Do I really need the SQL Server Agent Service started? ...
    (microsoft.public.sqlserver.setup)
  • Re: Can MSDE run SQL Server Agent service in Win98
    ... >> SQL Server Agent service. ... > AFAIK the SQL Server Agent runs on Win9x with no problem..... ... > run as a service becouse Win9x does not support it, ...
    (microsoft.public.sqlserver.msde)
  • Re: SQL Server Agent Proxy Error
    ... I ran the following command from Query Analyzer: ... I made the account that runs SQL Server ... and SQL Server Agent a member of the local admins group on the server. ... The proxy accout was set properly, ...
    (microsoft.public.sqlserver.programming)
  • Re: Enabling SQL Server Agent by using scripts
    ... To start SQL Server Agent from the commandline you can do this: ... net start sqlserveragent ... > command line command sqlagent should only be used for diagnostic purposes. ...
    (microsoft.public.sqlserver.server)
  • Re: SSIS - can SSIS pkg recognize a drive letter within SMS job?
    ... Realized from your process description that you were running SSMS from your ... I normally run SSMS on our Sql Server using a remote (terminal ... Uploaded the SSIS package which was simple and just contained one ... What is your SQL Server Agent service account? ...
    (microsoft.public.sqlserver.dts)