Comments on: SQL SERVER – Enable Login – Disable Login using ALTER LOGIC – Change name of the ‘SA’ http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/ Personal Notes of Pinal Dave Fri, 17 May 2013 15:26:57 +0000 hourly 1 http://wordpress.com/ By: SQL SERVER – Weekly Series – Memory Lane – #027 | SQL Server Journey with SQL Authority http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-468651 Sat, 04 May 2013 01:31:10 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-468651 [...] Enable Login – Disable Login using ALTER LOGIC – Change name of the ‘SA’ One of the most important but ignored SQL Security Tip. A must read for everyone! [...]

]]> By: Joe http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-359086 Fri, 12 Oct 2012 07:54:34 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-359086 How do disable SA on SQL 2000?

]]> By: girichand http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-353250 Wed, 26 Sep 2012 10:35:38 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-353250 Sir, all the answers based on after connecting to Management Studio. What to do if the SQL server it self get disabled and preventing to connect to the Database. This is happening in my case sir. Pl. read.
Sir,
Our front end software which is in VB has disabled the SQL. Now i am unable to start Management Studio with my Administrator account or with any other logins. Because of this I am unable to get the data through tables directly. Our software makers deliberately did this to use their report generation menus from their front end software(VB) only. But I become handicapped because of this. For me the enabling/Disabling an user only possible after getting connected to Management Studio. In my case I cant get connected to Management Studio. I tried in different levels through services.msc etc. If I reinstall the SQL then I am able to connect but the problem starts after installation of our software. I feel that there might be a solution for this. The screen shot for the same is http://imageshack.us/a/img59/5246/76643895.png .Pl. give me a sollution.

Specifications:- Windows Server 2003 Service Pack 2, SQL 2008.

]]> By: naveen http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-325887 Mon, 06 Aug 2012 11:09:37 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-325887 hi SIR,,PLS HELP ME VERY URGENT,,,,,I LOGGED IN INTO SSMS AND IN THE SECURITY TAB I MADE LOGIN DISABLE,,,,NOW I M TRYING TO OPEN DATEABASE IT IS SHOWING AN ERROR,,,LOGIN IS DISABLED,,,PLS HELP ME,,,I M NEW TO SQL
PLS HELP….

]]> By: Veronica http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-293192 Sun, 03 Jun 2012 06:37:01 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-293192 with apropos to Mr. Ranjeet, I completely agree !!! HatsOff !!!!!!

]]> By: Neel http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-193076 Fri, 11 Nov 2011 10:50:01 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-193076 Great info Thanks

]]> By: ranjeet http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-153497 Thu, 04 Aug 2011 05:28:46 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-153497 sir u r the ultimate authoriy , wether microsoft itself unable to solve my problem.
thanks,

]]> By: claudiok http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-122911 Fri, 11 Mar 2011 20:28:49 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-122911 Hola.

Me di cuenta de algo bastante raro en sql server 2005 y necesito corroborarlo, porque me parece un bug de sql server 2005.

1.- Cree un login con la instruccion alter login …
2.- Luego lo cree como usuario en la BD que le corresponde con la instruccion CREATE USER ….
3.- Luego se me pidio hacer un SP ( stored procedure) , en donde los usuarios pudieran cambiar sus password ( contraseñas).
4.- Realice dicho SP, ocupando ALTER LOGIN …..
5.- Forme una instruccion dinamica, como sigue :

select @v_query = “ALTER LOGIN ” + @fld_cod_usu + ” WITH PASSWORD = ‘” + @fld_pas_new + “‘ OLD_PASSWORD = ‘” + @fld_pas_old + “‘”

y luego se executa como sigue :

EXECUTE sp_executesql @v_query

6.- Hasta aqui todo bien y de hecho funciona bien.

7.- La raro que descrubrí, haciendo pruebas, es que en sql server 2005 al crear el login por primera vez, éste tiene la capacidad de cambiar su contraseña, y la de CUALQUIER OTRO USUARIO. !!!!! uppsss

8.- Ante este escenario, le denegué el permiso de hacer eso vía la instruccion : deny alter any login to

9.- Esto a su vez implico, que el usuario ya no puede cambiar su clave, dado que es requisito segun sql servr 2005 que para ocupar alter login, se tenga el permiso de alter any login.

10.- Esto lo comprobé creando 3 usuarios desde la nada y SIN ocupar la intruccion grant alter any login al momento de la creacion.

El script exacto de la creacion del login para su revisión, es :

USE master
go
CREATE LOGIN [usu_003]
WITH PASSWORD=N’12345678′ ,
DEFAULT_DATABASE = db_cheq,
DEFAULT_LANGUAGE = us_english,
CHECK_EXPIRATION = OFF,
CHECK_POLICY = OFF
go
ALTER LOGIN [usu_003] ENABLE
go
GRANT CONNECT SQL TO [usu_003]
go

Esperando sus comentarios, atte claudiok.

]]> By: raji http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-121341 Tue, 01 Mar 2011 10:25:15 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-121341 Right click login go to properties then options is there u can see is it enable or disable

]]> By: Abhilash http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-95829 Tue, 26 Oct 2010 05:15:58 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-95829 Hello,

How do I find which Admin had disable/enabled a login in SQL 2005?

Thanks,
Abhilash

]]> By: John http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-80412 Thu, 15 Jul 2010 17:05:02 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-80412 thanks a lot, your blog is really help me a lot.

I’m sure many people do.

]]> By: Marko Parkkola http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60842 Mon, 08 Feb 2010 13:01:31 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60842 Slow day at work so I made an example.

http://weicco.spaces.live.com/blog/cns!D23A6DEABD865C68!502.entry

]]> By: Dhiraj http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60835 Mon, 08 Feb 2010 09:17:20 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60835 how i can disable particular record from table of database.

i am using
1.Microsoft sql server 2005
2.project is in c#.net
3.microsoft visual studio 2008

]]> By: Bing http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60609 Wed, 03 Feb 2010 13:56:26 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60609 Hi,
My computer cannot log in the sa account, too. My SQL server 2005 was installed with VS2008. I didn’t care it at that time. I want to use it now. So I don’t know how to let it work?

Another question: If I use the Windows Authorizations to log in my SQL Server 2005. Use which account in my C# program?

Regarsd,

Bing
Ths!

]]> By: Nishit http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60549 Tue, 02 Feb 2010 11:13:40 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60549 Hi Pinal,

I understand that we can not disable a login (SQL Server authenticated) by the method mentionded in your reply.

Regards,
Nishit Shah

]]> By: Nalini http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60314 Thu, 28 Jan 2010 06:16:13 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60314 Pinal,

How to check if a login is diabled/enabled in SQL 2k?

]]> By: Pinal Dave http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60281 Wed, 27 Jan 2010 14:59:20 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60281 Hello Rod,

You can disable a login by right click the login > Properties > Status page > Disbaled

Regards,
Pinal Dave

]]> By: Rod Merritt http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60211 Mon, 25 Jan 2010 21:54:56 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-60211 I’m trying to disable a SQL2K Login. The only thing I can think of right now is to change the password, since the one I want to disable is using SQL Server Authentication.

]]> By: Laura http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-47531 Thu, 26 Feb 2009 17:43:28 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-47531 FP, did anyone answer this?

Is there a way to disable the sa account in SQL 2000?
I want to disable but not revoke right now.
thanks, Laura

]]> By: SEPROGFRIEREE http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-43800 Sun, 19 Oct 2008 09:54:49 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-43800 Hello my friends!
The interesting name of a site – blog.sqlauthority.com
I recently 1 hours
looked in a network So I have found your site :)
The interesting site but does not suffice several sections!
However this section is very necessary!
Best wishes for you!
Forgive I is drunk :))

]]> By: Anuraj http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-43797 Sun, 19 Oct 2008 06:56:32 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-43797 Thanks :)

]]> By: Janine http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-34980 Thu, 10 Apr 2008 22:57:53 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-34980 How do I enable for all users at one time

]]> By: Ali http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-33913 Sat, 23 Feb 2008 12:13:56 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-33913 Good, Thanks;;

But how can I enable and disable ‘sa’ account using command line?

1- I’m using windows 2003 + MS SQL 2005 Enterprice Edition
2- I have a full administrator prevoligies on the server
3- I’ve removed the builtin/adminstrators from the SQl 2005 Logins :(

in brief I have the ‘sa’ user and the password, but the sa account is disabled :(

how can i access the sql database cause i can’t login now :( ??

]]> By: ennarr http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-33278 Fri, 25 Jan 2008 22:11:09 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-33278 Is there any dependency table to check, all the dependencies of a Login account before disabling it?

I will check for jobs (owner) … what else?
Ravi

]]> By: Miguel http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-32149 Thu, 10 Jan 2008 19:52:58 +0000 http://blog.sqlauthority.com/2007/05/03/sql-server-enable-login-disable-login-using-alter-logic-change-name-of-the-sa/#comment-32149 Gracias!

]]>