SQL SERVER – Disable Windows Authentication – Remove Windows Authentication Login Account
February 24, 2009 by pinaldave
I just received following email from one of the blog reader.
Question : “How to disable Windows Authentication?”
Answer : It can not be disabled. Windows Authentication is the most secure way to login in system.
Reference : Pinal Dave (http://blog.SQLAuthority.com)
Like this:
Be the first to like this post.
Posted in Pinal Dave, SQL, SQL Authority, SQL Query, SQL Security, SQL Server, SQL Tips and Tricks, T SQL, Technology | Tagged SQL Login | 14 Comments
Leave a Reply
How i can Password on sqlserver DataBase Similar Oracle?
Technically by disallowing Windows users access you can block anyone’s connection in effect disabling it.
While being the most secure, its not the fastest…for sites that have hundreds/thousands of connections made per minute there is a noticable difference between Windows and SQL Server Authentication.
How to implement database clustering in SQL Server 2005..Kindly let me know the steps for it…Does it really benefits the organisation….
When I open ALM application (Automation license managment) I get error ” Login in database is momentarily out of service”
How can I remove this warning and start application normally.
As above it is said “disallowing Windows users access you can block anyone’s connection in effect disabling it.”
how can we do it
Hi,
can u give me main difference between function and trigger?
please let me know ?
Thanks!
Hello Sir,
Can you tell me how can I protect my database with password. I do not want user to operate on database without password.
Is there any way to disable Windows Authentication or any way to protect database with password.
I think there should be some provision to protect database.
I have database on Win XP system and there’s no domain system at my client side. I just want to protect my database. I dont want anybody to view data without my permission.
Thanks a lot for lots of previous posts.
I hope you will give me a ultimate solution for this too..
Thankx again.
Hello Ishrar,
Use “SQL Server and Windows Authentication mode” as server authentication. Then do not create any login for any windows user. You can also remove Builtin\Administrator group.
This way you there would be only SQL logins though which user would login in your database.
Regards,
Pinal Dave
Pinal Dave,
I note your comment of March 29 and I have been trying to remove the BUILTIN\Administrators and the BUILTIN\Users groups but no success. I have tried both DROP LOGIN and ALTER LOGIN … DISABLE but I get a syntax error message. Using SQL Server Express 2008.
Can you help?
Jeremy
OK, got it now. Needs brackets around, e.g. DROP LOGIN [BUILTIN\Adminstrators]. Apologies.
J.
Thank you very much,
I have tried and I got what I needed to do.
Reading your posts from last 2 years…
Thanks again.
Regarding SQL Server security, We have a 3rd party app, Costpoint from Deltek, which users login to access and update our 2005 SQL Server database. I’ve been tasked to disable an account after 3 invalid login attempts through this application to the database. My boss doesn’t want me to go the route of the alter login command on the database side, and I’m not allowed to update the application code either. Is there a way to do this using SQL Server authentication?
Hi Matt,
I face the same issue.
Did you find a solution to this?
Thank you,
Dave
to disable window authentication login, you must collapse the “Security>Server Roles” part under the list of your databases. Right Click the ‘public’ role and select properties. select ‘Permissions’ under ‘General’ and then tick the ‘Deny’ CheckBox for the ‘Connect’ permission.
All users using window authentication only that would try to connect to the server would be blocked because BUILTIN\USERS have public permissions only.
Regards,
Ross
How to protect database, by login through static IP from out side the network using sQL management studio. But application should be run from that location. Application is accessing database