RE: SQL Server in different machine

From: Kavi (Kavi_at_discussions.microsoft.com)
Date: 12/15/04 

Date: Tue, 14 Dec 2004 17:25:12 -0800

Thanks very much Fany. I learnt a lot from your answer.

Kavi.

"Fany Vargas [MSFT]" wrote:

> 1. With no error message its difficult to tell if the issue is security or
> connectivity. You can enable security auditing on the SQL Server:
>
> In Enteprise Manager
> Expand the server group.
> Right-click the SQL server, and then click Properties.
> Click the Security tab.
> Under Authentication, click SQL Server and Windows.
> Under Audit level, select the level at which user accesses to Microsoft®
> SQL Server™ are recorded in the SQL Server error log:
> None causes no auditing to be performed.
> Success causes only successful login attempts to be audited.
> Failure causes only failed login attempts to be audited.
> All causes successful and failed login attempts to be audited.
>
> after you restart SQL Server, you will then see any login failures in the
> SQL errorlog (program files\micrososft sql server\mssql\log)
>
> 2. If you see a msg ststing loging failed for user 'IUSER_machinename' then
> yes you need to grant permissions to IUSR
>
> 3.Also check these KB:s
>
> PRB: "Login Failed" Error Message When You Create a Trusted Data - ID:
> 316989
> http://support.microsoft.com/?id=316989
>
> Authentication methods for connections to SQL Server in Active Server - ID:
> 247931
> http://support.microsoft.com/?id=247931
>
> PRB: Troubleshooting Error 80004005 "Login Failed" in ASP - ID: 306586
> http://support.microsoft.com/?id=306586
>
>
> Fany Vargas
> Microsoft Corporation
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> Are you secure? For information about the Strategic Technology Protection
> Program and to order your FREE Security Tool Kit, please visit
> http://www.microsoft.com/security.
>
> Microsoft highly recommends that users with Internet access update their
> Microsoft software to better protect against viruses and security
> vulnerabilities. The easiest way to do this is to visit the following
> websites:
> http://www.microsoft.com/protect
> http://www.microsoft.com/security/guidance/default.mspx
>
>

Relevant Pages

  • RE: Changing Authentication modes?
    ... How to set up Mixed Mode security ... Security Note When possible, use Windows Authentication. ... click SQL Server and Windows. ... All causes successful and failed login attempts to be audited. ...
    (microsoft.public.sqlserver.clustering)
  • Re: SQL or Access DB
    ... As far as encryption goes though... ... with Sql Server you can use SQL DMO and encrypt your stored procedures ... installation - Security was absolutely critical and in most instances, ... > then we create a nice gui around this database and sell it to automotive ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Is there any way to prevent hacker trying to guess sa password?
    ... and port 1433 will not be open. ... If someone can crash SQL Server by connecting to port 1433, ... You don't need multiple security experts. ...
    (microsoft.public.sqlserver.security)
  • Re: Getting to the bottom of MSDE network connection problems ...
    ... Brilliant, Nick, especially the explanation for local network user being ... authenticated as GUEST in WinXP SP2. ... > on a desktop OS like XP (meaning that, you can not compare SQL Server ... > again and selected the security tab. ...
    (microsoft.public.sqlserver.msde)
  • [NT] SQL Extended Procedure Functions Contain Unchecked Buffers
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... SQL Server 7.0 and 2000 provide extended stored procedures, ... Several of the Microsoft-provided extended stored procedures have been ... Exploiting the flaw could enable an attacker to either cause the SQL ...
    (Securiteam)