RE: Authentication in MSDE 2000



Dear Strawberry,
Welcome to Microsoft TechNet Managed Newsgroup. My name is Charles
Wang[MSFT]. It is my pleasure to work with you on this post.

For your 1st question, "How to remove windows Authentication mode in MSDE
2000?", unfortunately it cannot be removed. The reason is that by design
SQL Server supports two authentication modes, one is Windows Authentication
Mode, while the other is mixed mode which contains both Windows
Authentication and SQL Server Authentication. No matter which
authentication mode you choose, it will use Windows Authentication.
Please refer to:
Authentication Mode
http://msdn.microsoft.com/en-us/library/aa176599.aspx

If you are concerned with the windows administrators group, you can
explicitly limit the permissions of the BUILTIN\Administrators group in
your SQL Server. For example:
exec sp_dropsrvrolemember 'BUILTIN\Administrators','sysadmin'
Go

Regarding the stored procedures of adding or dropping the existing fixed
server roles assigned to a login, you can refer to these articles:
sp_dropsrvrolemember
http://msdn.microsoft.com/en-us/library/aa933289(SQL.80).aspx
sp_addsrvrolemember
http://msdn.microsoft.com/en-us/library/aa259597(SQL.80).aspx


Regarding your 2nd question, as I have explained, I am afraid that you have
to live with it. However you can restrict Windows account's access
permissions in your SQL Server instance by removing the existing
permissions to the mapped sql logins or simply removing the logins. To
remove a login, you can use the stored procedure sp_droplogin:
sp_droplogin
http://msdn.microsoft.com/en-us/library/aa933285(SQL.80).aspx

If you have any other questions or concerns, please do not hesitate to let
me know. I will do my best to help.

Best regards,
Charles Wang

Microsoft Online Community Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
====================================================













.



Relevant Pages

  • Re: Credentials not being passed with remote access
    ... allowed windows authentication to work, ... I had assumed johnx was a domain user rather than a local Windows account. ... johnx was set up as a local login on sql server. ...
    (microsoft.public.sqlserver.security)
  • Re: Very basic login question
    ... In order to use Windows Authentication the two computers have to be members of the same domain or trusted domains. ... you should have a login at the SQL Server on the XP Pro workstation. ...
    (microsoft.public.sqlserver.security)
  • Re: Unexpected Login Screen When Accessing SQL Data Via .NET Intra
    ... >> data and the SQL Server is on the same server. ... >> My problem is that one user has started getting a login popup ... >> right in via Windows Authentication like everyone else and like they ...
    (microsoft.public.sqlserver.connect)
  • Re: Unexpected Login Screen When Accessing SQL Data Via .NET Intranet
    ... >> data and the SQL Server is on the same server. ... >> My problem is that one user has started getting a login popup ... >> right in via Windows Authentication like everyone else and like they ...
    (microsoft.public.sqlserver.connect)
  • Re: SQL server 2005 login issure 2
    ... My programming knowlege is pretty rusty, but if you installed SQL Server ... if you installed with Windows Authentication and then ... ALTER LOGIN sa ENABLE; ... > If by any change you have read my original post titled "SQL Server 2005 ...
    (microsoft.public.sqlserver.connect)