Hello,
We need to change passwords to sa users from remote clients. The
problem is of course that we need to encrypt the password.
What is the best way to do this?
We read about applying a secure connection with sql server using SSL,
IPSec, multiprotocol. We implement them but we would like to know if
there is a way (maybe an api) that allow to change passwords and
encrypt them.
Yaron Paryanty
Cyber Ark CompanyI hope your asking about encrypting a session, and not using 'sa' for your
application...
By default if there is a Server certificate installed on SQL, we do encrypt
the logins on the wire. To be more secure you can Force Protocol
encryption on the client, which will encrypt all the traffic on the wire.
276553 HOW TO: Enable SSL Encryption for SQL Server 2000 with Certificate
Server
http://support.microsoft.com/?id=276553
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||First of all thank you for your answer.
I am asking about encrypting the session but after i logon to the
mssql server i want to alter the password of sa user (or any other
user). If i sent the new password as is it will send by plained text.
I implement SSL and it works fine but i wanted to know if there is
something easier - like an API which change the password and send it
encrypted.
Thanks,
Yaron Paryanty
Cyber-Ark|||Protocol encryption is the way to do this safely. We' re able to encrypt
over all the protocols in SQL 2000. In previous versions we could only
encrypt the data using Multiprotocol.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.
Showing posts with label course. Show all posts
Showing posts with label course. Show all posts
Tuesday, February 14, 2012
Sunday, February 12, 2012
Change of NT password user affect to service
Dear all,
Whenever that I change my password on domain NT, then MSSQLSERVER
service failed (local sql server of course). So that I've got to enter in
that service
and update the password manually on LOG ON flap.
At the same time when I open my enterprise manager not appears all those
Network Sql Serverthat before I had. '?
I would like to have automatically this change.
Any help will be welcomed,
Thanks in advance,Enric,
That means that the service is using your account and every time you change
your password, you have to update the service.
Why you do not create an account just for the service?
See "Setting up Windows Services Accounts" in BOL.
AMB
"Enric" wrote:
> Dear all,
> Whenever that I change my password on domain NT, then MSSQLSERVER
> service failed (local sql server of course). So that I've got to enter in
> that service
> and update the password manually on LOG ON flap.
> At the same time when I open my enterprise manager not appears all those
> Network Sql Serverthat before I had. '?
> I would like to have automatically this change.
> Any help will be welcomed,
> Thanks in advance,|||It is better to create a special service account rather than using your own
for SQL Server services.
Hope this helps.
Dan Guzman
SQL Server MVP
"Enric" <Enric@.discussions.microsoft.com> wrote in message
news:DEF51AED-F720-46A1-9512-EBEE6E6DBFA2@.microsoft.com...
> Dear all,
> Whenever that I change my password on domain NT, then MSSQLSERVER
> service failed (local sql server of course). So that I've got to enter in
> that service
> and update the password manually on LOG ON flap.
> At the same time when I open my enterprise manager not appears all those
> Network Sql Serverthat before I had. '
> I would like to have automatically this change.
> Any help will be welcomed,
> Thanks in advance,|||Local System Account?
take care,
"Dan Guzman" wrote:
> It is better to create a special service account rather than using your ow
n
> for SQL Server services.
> --
> Hope this helps.
> Dan Guzman
> SQL Server MVP
> "Enric" <Enric@.discussions.microsoft.com> wrote in message
> news:DEF51AED-F720-46A1-9512-EBEE6E6DBFA2@.microsoft.com...
>
>|||Enric,
He meant a "domain user account".
AMB
"Enric" wrote:
> Local System Account?
> take care,
> "Dan Guzman" wrote:
>|||You could use the build-in Local System account if access to network
resources isn't needed (e.g. backup to UNC). As Alejandro suggested, I was
thinking of a domain account since this is apparently what you are currently
using.
Hope this helps.
Dan Guzman
SQL Server MVP
"Enric" <Enric@.discussions.microsoft.com> wrote in message
news:E2E61BAB-6C00-4B9A-AC44-FCD759E22E6E@.microsoft.com...
> Local System Account?
> take care,
> "Dan Guzman" wrote:
>
Whenever that I change my password on domain NT, then MSSQLSERVER
service failed (local sql server of course). So that I've got to enter in
that service
and update the password manually on LOG ON flap.
At the same time when I open my enterprise manager not appears all those
Network Sql Serverthat before I had. '?
I would like to have automatically this change.
Any help will be welcomed,
Thanks in advance,Enric,
That means that the service is using your account and every time you change
your password, you have to update the service.
Why you do not create an account just for the service?
See "Setting up Windows Services Accounts" in BOL.
AMB
"Enric" wrote:
> Dear all,
> Whenever that I change my password on domain NT, then MSSQLSERVER
> service failed (local sql server of course). So that I've got to enter in
> that service
> and update the password manually on LOG ON flap.
> At the same time when I open my enterprise manager not appears all those
> Network Sql Serverthat before I had. '?
> I would like to have automatically this change.
> Any help will be welcomed,
> Thanks in advance,|||It is better to create a special service account rather than using your own
for SQL Server services.
Hope this helps.
Dan Guzman
SQL Server MVP
"Enric" <Enric@.discussions.microsoft.com> wrote in message
news:DEF51AED-F720-46A1-9512-EBEE6E6DBFA2@.microsoft.com...
> Dear all,
> Whenever that I change my password on domain NT, then MSSQLSERVER
> service failed (local sql server of course). So that I've got to enter in
> that service
> and update the password manually on LOG ON flap.
> At the same time when I open my enterprise manager not appears all those
> Network Sql Serverthat before I had. '
> I would like to have automatically this change.
> Any help will be welcomed,
> Thanks in advance,|||Local System Account?
take care,
"Dan Guzman" wrote:
> It is better to create a special service account rather than using your ow
n
> for SQL Server services.
> --
> Hope this helps.
> Dan Guzman
> SQL Server MVP
> "Enric" <Enric@.discussions.microsoft.com> wrote in message
> news:DEF51AED-F720-46A1-9512-EBEE6E6DBFA2@.microsoft.com...
>
>|||Enric,
He meant a "domain user account".
AMB
"Enric" wrote:
> Local System Account?
> take care,
> "Dan Guzman" wrote:
>|||You could use the build-in Local System account if access to network
resources isn't needed (e.g. backup to UNC). As Alejandro suggested, I was
thinking of a domain account since this is apparently what you are currently
using.
Hope this helps.
Dan Guzman
SQL Server MVP
"Enric" <Enric@.discussions.microsoft.com> wrote in message
news:E2E61BAB-6C00-4B9A-AC44-FCD759E22E6E@.microsoft.com...
> Local System Account?
> take care,
> "Dan Guzman" wrote:
>
Subscribe to:
Posts (Atom)