Re: SQL Server Mode


Hi Warren,

In SQL Server 2000 you can also change the authentication mode anytime you
want.

In the real life it is not always easy to use the Windows Authentication
Mode: there are so many applications out there from software vendors using
SQL Server Authentication.

Hope this helps,

Ben Nevarez
Senior Database Administrator
AIG SunAmerica



"Warren Brunk" wrote:

I look at it this way...

If I am only going to have users on a Windows Domain connecting to the
database then logically the domain security is better than creating and then
providing username and passwords to users.

If you have external applications and users outside of the Domain using your
databases and you dont want to grant them rights to the domain then mixed
mode is the way to go.

The good news is that in SQL Server 2005 you can change the Authentication
mode after install...
http://msdn2.microsoft.com/en-us/library/ms188670.aspx


--
/*
Warren Brunk - MCITP,MCTS,MCDBA
www.techintsolutions.com
*/


"Ben Nevarez" <BenNevarez@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0D6C1C50-DA03-41E6-82A2-F575C52C99C6@xxxxxxxxxxxxxxxx

A few notes from BOL:

"Windows Authentication Mode is much more secure than Mixed Mode"

"Windows Authentication utilizes Kerberos security protocol, provides
password policy enforcement in terms of complexity validation for strong
passwords, provides support for account lockout, and supports password
expiration"

"Security Note: When possible, use Windows Authentication"

"SQL Server Authentication is provided for backward compatibility only.
When
possible, use Windows Authentication"

Hope this helps,

Ben Nevarez
Senior Database Administrator
AIG SunAmerica



"George Schneider" wrote:

what do you mean it depends on what we are doing and how?

We run several db's fro everything from our fax server to our web site db
how can i determine which is best.

how is windows more secure than mixed mode?

"Andrew J. Kelly" wrote:

Windows is generally more secure but which is better depends on what
you are
doing and how.

--
Andrew J. Kelly SQL MVP
Solid Quality Mentors


"George Schneider" <georgedschneider@xxxxxxxxxxxxxxx> wrote in message
news:D540F786-37EE-42A2-BF72-9ACDA9E01E4E@xxxxxxxxxxxxxxxx
IS it better to use mixed mode or windows authentication mode? Which
method
is more secure?



.

Relevant Pages

  • Re: Windows Authentication in asp.net 2005 to SQL Server?
    ... If the domains do not trust each other, Windows authentication is not going ... Basic authentication sometimes makes the need for Kerberos delegation go ... generic account to do the backend data stuff on our SQL Server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Remote connection failed
    ... If you are going over a remote connection or are not logging ... into the domain where SQL Server is then no, Windows ... authentication won't work. ...
    (microsoft.public.sqlserver.connect)
  • Re: Changing passwords / Blocking SA login attempts
    ... I went into the Server Config properties and changed to Windows ... My login for Start and Run SQL server was in this format. ... I am supposing this was an SQL authentication, ...
    (microsoft.public.sqlserver.security)
  • Windows Authentication with IIS on separate machines
    ... Yes, setting Basic Authentication in IIS works, but the ... >in SQL server but doesn't work if user account was ... >imported from a Windows account. ...
    (microsoft.public.sqlserver.security)
  • Re: Login failed for ServerGuest
    ... I think it is not a limitation in Windows 2000. ... access SQL server on Win2000 server by using Windows authenctication if I ... | I have noticed that when I try to log in using Windows Authentication ...
    (microsoft.public.sqlserver.connect)