Re: How do I get (or set) the password for VSS 2005 users?
- From: "David Thielen" <david@xxxxxxxxxxxxxxxxxx>
- Date: Thu, 16 Feb 2006 05:38:31 -0800
Hi;
I understand & agree with you on that. That's why I find the admin password
setup weird, it doesn't do much for security but the design is only 1 person
has it and if that 1 person is run over - then you can't get in to the admin
account.
But as it isn't really protecting much, we just share the password around so
it can't get lost.
--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com
"Alin Constantin [MSFT]" wrote:
David,.
VSS users/passwords are not a mean to enforce security on the VSS databases.
A malicious user with access to the database share doesn't need the admin
password (and doesn't even need to hack it) to view or modify the files in
the database - he can simply operate on the physical files in the data
directory. The real database security should be enforced through NTFS file
system and Windows share access rights.
--
Alin Constantin
This posting is provided "AS IS" with no warranties, and confers no rights.
"David Thielen" <david@xxxxxxxxxxxxxxxxxx> wrote in message
news:3C487E10-4A16-4660-A76B-1E59E3BA4717@xxxxxxxxxxxxxxxx
Hi;
Yeah - I've seen on the web how it's pretty easy to hack the admin
password
so I don't use my domain password there. IMO this is a pretty bad design
because there is only one admin user. It's not like a domain where we have
several users with admin rights so if one gets run over another can still
get
in to everything.
I guess the answer is just to write it down and make sure all admins have
a
copy. This is one of those cases where the use case makes the security
weak.
--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com
"Alin Constantin [MSFT]" wrote:
Hi David,
The Admin user in VSS can reset the passwords for all other users.
If you lose the Admin password you're on your own - for legal reasons
Microsoft PSS cannot help you recover it.
(if you get there, search the web what other users did when they got in
the
same situation, but it's smarter not to get there anyway)
--
Alin Constantin
This posting is provided "AS IS" with no warranties, and confers no
rights.
"David Thielen" <david@xxxxxxxxxxxxxxxxxx> wrote in message
news:0736C53B-72CA-43AA-8BD7-6F4EDE45EACD@xxxxxxxxxxxxxxxx
Ok, we don't need this. But for future reference - how do we do this?
Or
should I have everyone write down their password and give it to me?
--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com
"David Thielen" wrote:
Hi;
If we do not know the password for any user including admin, how can
me
get
them or force new ones?
Please do not say there is no way to do this as VSS does not use the
domain
passwords so it must have a recovery method. (Our problem is everyone
set
them when they first used it and then promptly forgot them as they
never
needed it again since you are not prompted.)
--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com
- References:
- Re: How do I get (or set) the password for VSS 2005 users?
- From: Alin Constantin [MSFT]
- Re: How do I get (or set) the password for VSS 2005 users?
- From: David Thielen
- Re: How do I get (or set) the password for VSS 2005 users?
- From: Alin Constantin [MSFT]
- Re: How do I get (or set) the password for VSS 2005 users?
- Prev by Date: License
- Next by Date: Re: Failed to access IIS Meatbase
- Previous by thread: Re: How do I get (or set) the password for VSS 2005 users?
- Next by thread: Re: VS 2003 and vss6.0d
- Index(es):
Relevant Pages
|
