7
votes
3answers
13k views

Where are SQL 2008 Login passwords stored?

I need to know in which file SQL Server 2008 actually stores the passwords. This is a question being asked by a security auditor. I know I can get password hashes with LOGINPROPERTY('bbellomo', ...
2
votes
1answer
1k views

Sql server automatically change password

I have sql server 2008 R2. Everytime I create new sql server authorization login, whatever password I write it was changed to unknown me 15 characters password. Same is for sa. So I can't lofin with ...
2
votes
1answer
966 views

Copy the Users from one MS-SQL server to another

I am currently facing the problem that someone working here changed the password of the sa user of the Microsoft SQL Server 2005. The SQL-Server is running on a VM, and the application we run won't ...
0
votes
1answer
66 views

Only allow certain processes to connect to MS SQL

I've lost the source code for a very old application that connects to a MS SQL-server for some SQL queries. Since the login is hard-coded in the application I can't change the username/password on the ...
3
votes
8answers
376 views

Should a DBA store and retrieve passwords

Should a DBA record passwords for application logins, or should this be a responsibility of developers/analysts? By application login, I mean the login which an application uses for access to the ...
1
vote
6answers
1k views

Is it possible to change all users passwords to upper-case

I'm currently migrating some servers from MS sql server 2000 to 2008. Some of the legacy apps are password protected by essentially checking if a user with that name and password exists on the server. ...
6
votes
4answers
546 views

SQL Server: How do you check if it's safe to change the SA password?

If I change the SA password for a Microsoft SQL Server, can I see in a log or a trace if some application somewhere is trying to log in with the old password?