MSSqlServer service and Windows password reset

Hello,
I hope you guys can help me with a problem that I am facing...

I have started the MSSqlServer service and SQLServerAgent services
with a domain username and password.
There are periodic password resets to this user. Security policies
within the company dictate that the password for this domain account
cannot be permenant.

Would there be any way to automatically reset the pwd in these
services instead of manually changing them each time?

ThanksKannan (pv_kannan@.yahoo.com) writes:
> Would there be any way to automatically reset the pwd in these
> services instead of manually changing them each time?

I doubt there is, but since this is not really a MS SQL Server issue,
but rather a generic Windows question, a question to the approriate
newsgroup for Windows.

Personally, I would investigate possibilities to set up the account
so that it only can log in as service or some such, which would permit
unexpirable passwords.

--
Erland Sommarskog, SQL Server MVP, sommar@.algonet.se

Books Online for SQL Server SP3 at
http://www.microsoft.com/sql/techin.../2000/books.asp

MSSqlServer service and Windows password reset

Hello,
I hope you guys can help me with a problem that I am facing...
I have started the MSSqlServer service and SQLServerAgent services
with a domain username and password.
There are periodic password resets to this user. Security policies
within the company dictate that the password for this domain account
cannot be permenant.
Would there be any way to automatically reset the pwd in these
services instead of manually changing them each time?
ThanksKannan,
Is there a specific reason why these can't run under
system?
If not, try to shift the responsibility back to the group
with the security requirement. It would be reasonable to
ask that the admin user who changes the password should
also update the password in the services at the same time
(to ensure continuous availability). If this becomes too
onerous for them, perhaps they'll rethink their
application of the policy in this case.
BTW, I don't think services need to be stopped in order to
change the account password (i.e., wouldn't affect
availability). Can anyone else confirm?
...Jeff
>--Original Message--
>Hello,
>I hope you guys can help me with a problem that I am
facing...
>I have started the MSSqlServer service and SQLServerAgent
services
>with a domain username and password.
>There are periodic password resets to this user. Security
policies
>within the company dictate that the password for this
domain account
>cannot be permenant.
>Would there be any way to automatically reset the pwd in
these
>services instead of manually changing them each time?
>Thanks
>.
>

MSSQLserver

I have lost my password to my SQL server can someone help me retrieve it or
should I delete this server and download a new one?
Can you log in from the console or a domain admin account, using Windows
authentication, and change the password?
Adam Machanic
SQL Server MVP
http://www.datamanipulation.net
"RonP" <RonP@.discussions.microsoft.com> wrote in message
news:7119DAA8-68B0-416D-A53E-9EE46856B5B7@.microsoft.com...
>I have lost my password to my SQL server can someone help me retrieve it or
> should I delete this server and download a new one?
|||Look at this here if you are abel to change to mixed mode:
http://groups.google.de/group/comp.d...6b23861fd54c77
Then change the password ( If you ment that you lost the password of
the sa ) within a sql statement like:
EXEC sp_password 'sa', 'newpassword'
HTH, Jens Suessmeyer

MSSQLserver

I have lost my password to my SQL server can someone help me retrieve it or
should I delete this server and download a new one?Can you log in from the console or a domain admin account, using Windows
authentication, and change the password?
Adam Machanic
SQL Server MVP
http://www.datamanipulation.net
--
"RonP" <RonP@.discussions.microsoft.com> wrote in message
news:7119DAA8-68B0-416D-A53E-9EE46856B5B7@.microsoft.com...
>I have lost my password to my SQL server can someone help me retrieve it or
> should I delete this server and download a new one?|||Look at this here if you are abel to change to mixed mode:
http://groups.google.de/group/comp... />
861fd54c77
Then change the password ( If you ment that you lost the password of
the sa ) within a sql statement like:
EXEC sp_password 'sa', 'newpassword'
HTH, Jens Suessmeyer

MSSQLserver

I have lost my password to my SQL server can someone help me retrieve it or
should I delete this server and download a new one?Can you log in from the console or a domain admin account, using Windows
authentication, and change the password?
--
Adam Machanic
SQL Server MVP
http://www.datamanipulation.net
--
"RonP" <RonP@.discussions.microsoft.com> wrote in message
news:7119DAA8-68B0-416D-A53E-9EE46856B5B7@.microsoft.com...
>I have lost my password to my SQL server can someone help me retrieve it or
> should I delete this server and download a new one?|||Look at this here if you are abel to change to mixed mode:
http://groups.google.de/group/comp.databases.ms-sqlserver/browse_frm/thread/3f6b23861fd54c77
Then change the password ( If you ment that you lost the password of
the sa ) within a sql statement like:
EXEC sp_password 'sa', 'newpassword'
HTH, Jens Suessmeyer

MsSQL Security Issue

Hi, I having an issue on MsSQL Security Issue. Wish you guys can help me.
My problem is now I have create a login user and password for each Database. The problem is if the database file (.MDF, .ldf) has been copy out..user do attach manually, then put any new user and password to that db..so all my data will be view by others..is there any solution for this?
Another Question is for each DB..can we kick out sa user and put in our new user for that DB? So sa no permission on view/update/Add in records for that db?

Thanks you.Please view this tread
http://www.dbforums.com/showthread.php?threadid=970286

Basically u can only control ppl from accessing Enterprise Manager;SQL Service Agent by setting Window Authetication rights to users login to u'r Windows.

If a person can't enter the enterprise manager, can't shutdown the SQL Service Agent, they can't cut and copy the mdf and ldf files.

Normally, SA has full user rights to all dbs under its instance. It would be bad user management in your company if your force to kick out SA from a DB!!!!! , the SA password is given to the company DBA.

I don't think it is possible to kick SA rights. Even if SA is not the owner of the DB, it can enter any database in its instance.|||All database files should be placed so that the database server can access them, but no one else can. This is extremely important.

Backup tapes containing the information must be similarly secured.|||I see, thanks you. Actually my situation is a bit different. If we handle normally, it can handle as you said, but my db will goto client office, and the owner of the db don't want client manually open db and modify or copy as their own purpose...that why i looking for this solution..
anyway..thanks you ^.^|||Maybe I'm not understanding your particular issue but couldn't you encrypt the data that is of concern? There are better ways to secure your data but if you 2 way encrypt it and store the encryption/decryption routine in a dll then you should be good to go right? You would have your data access layer implicitly use the encryption/decryption function.

Of course people could still mess up the data but you could have a sanity check built into it somewhere.

Sorry that this isn't a SQL solution but there you go.

HTH,
Dan