Re: SQL Server Mode

George Schneider (georgedschneider@xxxxxxxxxxxxxxx) writes:
what do you mean it depends on what we are doing and how?

We run several db's fro everything from our fax server to our web site db
how can i determine which is best.

how is windows more secure than mixed mode?

Particularly in SQL 2000, SQL authentication had no protection against
brute-force attacks, and the password was not very secured on the wire.

Provided that you run SQL 2005 on Win 2003, SQL accounts are now subject
the same policies as Windows accounts, so failed login attempts will
lead to lock-out etc.

Windows authentication means that users just connect with out providing
any credentials themselves; the fact that they are already logged into
Windows is sufficient.

But as mentioned elsewhere in the thread, Window authentication is not
always possible. It reqiures all accounts to be in the same domain,
or at least in a trusted domain. If all you have is a workgroup, you
can use Windows authentication, but then users needs to have the same
user/password on all machines. For a workgroup, I would definitely
recommend SQL authentication.

--
Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx

Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
.

Relevant Pages

  • Re: Q: Named pipes and Windows (integrated) authentication
    ... >By the way, if you don't have SQL Enterprise Manager, there's an MSDE ... >>>his windows authentication to connect to the server. ... >>>Creating databases is only acomplished after you've already connected. ...
    (microsoft.public.sqlserver.connect)
  • Re: SQL MAIL and Sql Server Agent problem
    ... know how to prove that I am using the same account for SQL Server and SQL ... Is it a true statement that if the accounts are different I ... Exchange setup by just rebooting the server. ...
    (microsoft.public.sqlserver.connect)
  • Cant start the SQLAGENT
    ... I'm tired of trouleshoot one of my sql box that the sqlagent can't ... SQLServerAgent could not be started (reason: ... server ''; SQLServerAgent cannot start) ... local admin accounts none of them can start the service. ...
    (comp.databases.ms-sqlserver)
  • Re: Maximum Number of Database Users and Roles
    ... > of security accounts for sql server is 16379 ... > originally setup using a Windows Domain Group and users to access our sql ... > server database. ... > How are you accessing your database using sql secrutiy accounts with> ...
    (microsoft.public.inetserver.asp.db)
  • Re: Connection Pooling
    ... Any idea where and how we can limit the number of connections to SQL ... that's what I mean when I say SQL authentication (SQL Server has ... >>> If you are using Windows Authentication you may or not has a problem. ...
    (microsoft.public.dotnet.framework.aspnet)