Re: sa account privileges in question

From: Brian Lawton (brian.k.lawton_at_redtailcreek.com)
Date: 08/25/05 

Date: Thu, 25 Aug 2005 09:52:47 -0400

Sounds to me like you have a poorly designed application (security wise
anyway) on your hands. I'm not aware of any current Microsoft applications
that require the SA login. I'd push back on the group and request a much
more detailed explanation of exactly why they require SA privileges. Also as
a bit of CYA, you should ensure that your management understands the
security vulnerability you are being asked to assume responsibility for. 

-- 
--Brian
(Please reply to the newsgroups only.)
"stevtek" <stevtek@givti.com> wrote in message 
news:utGZrPXqFHA.3720@TK2MSFTNGP14.phx.gbl...
> During the creation of a db by an outside group they indicated that
> their application can only use the sa account and it doesn't work with
> the created account I set up for them with sa role permissions. They
> stated it had something to do with Microsoft only accepting sa account
> as a log in. For security purposes we wish not to give away our sa
> account but had to help them at that time.
>
> Is this true about Microsoft only accepting sa accounts as a log on?
> Now if we try to assign the created sql account to the db to switch from
> using sa there is an error message because they installed using sa and
> sa is dbo.
>
> Error 15405: Cannot use the reserved user or role name 'dbo'.
>
> Thank you for your input.
>
>
>
> *** Sent via Developersdex http://www.developersdex.com ***

Relevant Pages

  • Re: How to use EFS to encrypt SQL DB file
    ... You want to make sure that SQL is starting here with an ... account that has the right to decrypt the mdf file. ... For information about the Microsoft Strategic Technology ... Protection Program and to order your FREE Security Tool Kit, ...
    (microsoft.public.sqlserver.security)
  • XBL Account Hijacking
    ... Microsoft is investigating possible fraud on its Xbox Live online ... there have been reports of fraudulent activity and account ... Security researcher Kevin Finisterre was playing Halo on a recent ...
    (uk.games.video.xbox)
  • Re: Forms Authentication to specific folders
    ... I have added both "NETWORK SERVICES" the ASP.NET account on the local ... > Microsoft, ASP.NET Support Professional ... > steps listed to improve your computer's security. ... >> Michael Tissington ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Corrupt mdw file?
    ... >Admin account a password ... Security> WorkGroup ... >If you are using Microsoft Access 2000 or lower then: ...
    (microsoft.public.access.security)
  • dbo. records cannot be modified.
    ... I want to be able to modify the Microsoft provided records that was created ... and I struggled with it when playing with security, ... the owner of the records that was created by dbo. ...
    (microsoft.public.data.odbc)