Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase 12»»

how to disable windows authentication in sql server 2005 Active active cluster Expand / Collapse
Author
Message
Posted Wednesday, November 25, 2009 12:08 AM


Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Thursday, December 4, 2014 7:30 AM
Points: 1,202, Visits: 1,946
how to disable windows authentication in sql server 2005
I know Disabling is not possible but I want to prevent the windows authentication...in Active active cluster of sql server 2005 and I cannot delete anything just check uncheck the properties...

Please Help...


Thanks

Post #824324
Posted Wednesday, November 25, 2009 12:20 AM


SSChasing Mays

SSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing Mays

Group: General Forum Members
Last Login: Friday, December 12, 2014 12:19 AM
Points: 647, Visits: 1,311
windows is recommended authentication for SQL server.
However you must have your own reason to opt not to do so.

In SQL server only users / groups that are granted access explicitely can connect to the server.(bultin\admininistrators are added default, but you can revoke this also)

But be careful with credentials that are used by the services . Do some researches before doing so.


-- Roshan Joe
*******************************************
There are two types of DBAs. Those who has skills and those who have permissions
Jeff Moden -Forum Etiquette: How to post data/code on a forum to get the best help
Custom cleanup script for backups
Post #824333
Posted Wednesday, November 25, 2009 12:26 AM


Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Thursday, December 4, 2014 7:30 AM
Points: 1,202, Visits: 1,946
(bultin\admininistrators are added default, but you can revoke this also)

How Can I revoke it....?


Thanks

Post #824336
Posted Wednesday, November 25, 2009 12:37 AM


SSChasing Mays

SSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing Mays

Group: General Forum Members
Last Login: Friday, December 12, 2014 12:19 AM
Points: 647, Visits: 1,311
http://support.microsoft.com/kb/263712


-- Roshan Joe
*******************************************
There are two types of DBAs. Those who has skills and those who have permissions
Jeff Moden -Forum Etiquette: How to post data/code on a forum to get the best help
Custom cleanup script for backups
Post #824344
Posted Wednesday, November 25, 2009 1:55 AM


Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Thursday, December 4, 2014 7:30 AM
Points: 1,202, Visits: 1,946
I have read it , it is very well.
How to create the cluster service account as a login in SQL Server...?


Thanks

Post #824369
Posted Wednesday, November 25, 2009 2:07 AM


SSChasing Mays

SSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing Mays

Group: General Forum Members
Last Login: Friday, December 12, 2014 12:19 AM
Points: 647, Visits: 1,311
Find out which is the cluster service account from services.

Sp_grantlogin 'domain\account'

use master ;
sp_adduser 'domain\account'


-- Roshan Joe
*******************************************
There are two types of DBAs. Those who has skills and those who have permissions
Jeff Moden -Forum Etiquette: How to post data/code on a forum to get the best help
Custom cleanup script for backups
Post #824376
Posted Wednesday, November 25, 2009 4:11 AM


Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Tuesday, March 4, 2014 10:03 AM
Points: 1,096, Visits: 1,334
Why exactly are you trying to do this? It is a bit concerning that you dont have access to delete users but are talking about disabling them.

You also ask about adding users which you should know how to do if you are doing stuff like this. But want to add the type of user (AD) that you say you want to disable; and are now talking about cluster service users.....

Be very careful you know what you are doing and have authorisation otherwise your future might not be so rosey.

What exactly do you want to accomplish and why?


Adam Zacks

-------------------------------------------

Be Nice, Or Leave
Post #824410
Posted Wednesday, November 25, 2009 4:23 AM
SSC-Enthusiastic

SSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-EnthusiasticSSC-Enthusiastic

Group: General Forum Members
Last Login: Monday, April 28, 2014 8:38 AM
Points: 103, Visits: 215
Schadenfreude-Mei (11/25/2009)
Why exactly are you trying to do this? It is a bit concerning that you dont have access to delete users but are talking about disabling them.

You also ask about adding users which you should know how to do if you are doing stuff like this. But want to add the type of user (AD) that you say you want to disable; and are now talking about cluster service users.....

Be very careful you know what you are doing and have authorisation otherwise your future might not be so rosey.

What exactly do you want to accomplish and why?


my interpretation is that his/her question is clumsy formulated and he/she wants to know if it is possible to keep a sql server in a windows cluster environment clean from windows system administrators and keep it for dba's "only". i'll read the proposed solution link later but the issue i had (and perhaps is solved in the ms article) is that the health check needs in the standard setup sysadmin rights. and the health check is done with an account to which system administrators have access.
Post #824417
Posted Wednesday, November 25, 2009 4:31 AM


Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: Tuesday, March 4, 2014 10:03 AM
Points: 1,096, Visits: 1,334
Eduard (11/25/2009)
Schadenfreude-Mei (11/25/2009)
Why exactly are you trying to do this? It is a bit concerning that you dont have access to delete users but are talking about disabling them.

You also ask about adding users which you should know how to do if you are doing stuff like this. But want to add the type of user (AD) that you say you want to disable; and are now talking about cluster service users.....

Be very careful you know what you are doing and have authorisation otherwise your future might not be so rosey.

What exactly do you want to accomplish and why?


my interpretation is that his/her question is clumsy formulated and he/she wants to know if it is possible to keep a sql server in a windows cluster environment clean from windows system administrators and keep it for dba's "only". i'll read the proposed solution link later but the issue i had (and perhaps is solved in the ms article) is that the health check needs in the standard setup sysadmin rights. and the health check is done with an account to which system administrators have access.


I understand that for what ever reason he/she wants to keep other AD users out but what i dont get is why? This person obviously isnt the main dba as they dont have delete rights and so why are they doing this?

We (the dba's) dont own our boxes, we are responsible for them yes , but we cant lock out other IT admins (though it is tempting).

My point was, why is a junior dba undertaking a task which could have serious repercussions on a production server.


Adam Zacks

-------------------------------------------

Be Nice, Or Leave
Post #824420
Posted Wednesday, November 25, 2009 4:47 AM


SSChasing Mays

SSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing MaysSSChasing Mays

Group: General Forum Members
Last Login: Friday, December 12, 2014 12:19 AM
Points: 647, Visits: 1,311
Ajay,

What others are telling is right. If you are just looking at the possibility its fine. But you have plan to do it right out on a production database, I recommend other wise.


-- Roshan Joe
*******************************************
There are two types of DBAs. Those who has skills and those who have permissions
Jeff Moden -Forum Etiquette: How to post data/code on a forum to get the best help
Custom cleanup script for backups
Post #824427
« Prev Topic | Next Topic »

Add to briefcase 12»»

Permissions Expand / Collapse