Post reply

SSMS open sessions

  • March 4, 2013 at 11:56 am

    #274817

    We recently found quite a few errors in SQL error log at weekend the past Sunday, it lasts about 8 hours. . The login is from an untrusted domain and cannot be used with Windows authentication. [CLIENT 10.50...)

    We traced to the client IP address, and I asked if she tried to login over the weekend, but she didn't.

    But she said this monday morning, windows asked her to change the password, this is because we have policy that have to change password in 3 months.

    So on Sunday she had some SSMS queries open that was left so from last Friday.

    So we guess it is probably from SSMS of her workstation that keep trying to connect the server. and since her password is expired, it shows errors for windows authentication errors.

    My question is, when SSMS is open from client machine, even she was not working on it the whole weekend, why it keep trying to connect to server?

    is it supposed to work that way for SSMS?

    Thanks

  • March 4, 2013 at 1:17 pm

    #1593151

    If you have a query window open in SSMS and leave it open, your session stays on the server until the spid is forcibly closed (killed), the user closes out the window, or you physically disconnect your connection to the DB (Connection >> Disconnect or Disconnect All Queries) If you are familiar with Activity Monitor or how to query DMVs for session info, you'll notice these spid's having a status of "sleeping".

    ______________________________________________________________________________Never argue with an idiot; Theyll drag you down to their level and beat you with experience

  • March 4, 2013 at 1:25 pm

    #1593154

    Thanks,

    So for this user it happened her password expired on Sunday, so does it mean even it is at sleeping status, it will try to connect itself again to the server?

    It seems it tries to connect to the server every other 4 minutes.

    The strange thing is it started at 9:00 am on sunday and till 4:00 pm the error stopped.

    The user didn't work on Sunday at all.

    Thanks

  • March 4, 2013 at 1:28 pm

    #1593155

    Is it possible this user has a SQL Agent job running under their credentials?

    ______________________________________________________________________________Never argue with an idiot; Theyll drag you down to their level and beat you with experience

  • March 4, 2013 at 1:40 pm

    #1593161

    I checked there no jobs are running in her account start at 9:00 am.

    So not sure.

    Thanks,

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply