Re: SQL Server Remote Management - Command Line Question

From: John Bell (jbellnewsposts_at_hotmail.com)
Date: 06/20/04

  • Next message: Sue Hoegemeier: "Re: SQL Server Remote Management - Command Line Question" 
    Date: Sun, 20 Jun 2004 22:10:19 +0100

    Hi

    The first thing you should do when someone leaves is to change the NT
    password and remove them from all the NT groups they are in. This does not
    help if you have SQL logins, but hopefully your databases are not exposed to
    the outside world. Of course if someone has created a backdoor that noone
    knows about you still have a problem.

    John

    "JDB" <jbell@vitria.com> wrote in message
    news:10dbtdko5er6r4d@corp.supernews.com...
    > As a Sys Admin, I was wondering - if I have admin rights to a Win2k
    machine
    > that is hosting SQL Server 2000, do I have the ability using any
    > command-line tools such as OSQL or ISQL to add, delete, or change accounts
    > registered in SQL Server for the various databases if I don't have access
    to
    > a specific account within SQL Server?
    >
    > I ask, because the question that came up was - what if we have a DBA leave
    > under less than amicable circumstances? Could I, someone who has admin
    > rights on the machine, be able to log into that machine remotely and
    somehow
    > via command line (I don't maintain active SQL clients centrally), change
    the
    > SA password, remove an account, and/or add an account with sysadmin
    rights,
    > etc?
    >
    > Thanks in advance for any help -
    >
    >
    >

  • Next message: Sue Hoegemeier: "Re: SQL Server Remote Management - Command Line Question"

    Relevant Pages

    • Re: Help with Software/Hardware decision....
      ... SQL server on DC question has two aspects such as performance and security. ... the computer running SQL Server as a domain controller will work (and it ... MSSQLServer service must run within the security context of an NT account. ... This configuration lets users assign permissions and rights to a service by ...
      (microsoft.public.windows.server.networking)
    • Re: Scheduling a simple local package wont stick
      ... the FTP is just the first part of this package I wish to accomplish. ... group does not need to be, and on my servers is not, a SQL Server sysadmin. ... it is not obvious to me which account you are running under ... The rights you need to check are not SQL Server rights, ...
      (microsoft.public.sqlserver.dts)
    • Re: ASP.NET - SQL Server does not exist or access denied
      ... Make sure that the account is set up with "Log on as a Service" and "Log on as ... Make sure you've looked at your machine.config file as well (Windows ... ensure it would have no rights as a user), then set it up with the "log on" ... > a "SQL Server does not exist or access denied" error. ...
      (microsoft.public.sqlserver.security)
    • Re: Error 15401 using sp_grantlogin (not addressed by current KB articles)
      ... Restarting Windows 2000 resolved the problem for this particular account, ... confused when it sees a duplicate SID. ... > One way to get SQL Server to agree with the renamed NT ... > Preview (to ensure the script was created), ...
      (microsoft.public.sqlserver.security)
    • Re: SharePoint V3 Install Error
      ... But it our case it had to do with Group Policies that forbid the account of ... WSS FAQ:www.wssv3faq.com/wss.collutions.com ... Event Source: WindowsSharePointServices3Search ... whatever you are installing WSS as sufficient rights to the SQL Server ...
      (microsoft.public.sharepoint.windowsservices)
    Loading