Forum Replies Created

Viewing 15 posts - 826 through 840 (of 6,104 total)

  • RE: password expiration and password policy

    This is will tell you what SQL Server logins have either turned off:

    SELECT name

    FROM sys.sql_logins

    WHERE is_policy_checked = 0

    OR is_expiration_checked = 0

    K. Brian Kelley
    @kbriankelley

  • RE: Security using Local Windows group

    If you grant their Windows user account a login directly (not through the group), do you see the same issue?

    K. Brian Kelley
    @kbriankelley

  • RE: Security using Local Windows group

    Are you able to connect from a remote system using your account (I'm assuming you're running as a sysadmin level account)? The reason I ask is that Developer Edition for...

    K. Brian Kelley
    @kbriankelley

  • RE: NTLM to Kerberos

    Greg Edwards (11/18/2008)


    have to remember that for failover cluster. We don't use that, but another group here has one. But since we plan to move to SQL Server 2008, it...

    K. Brian Kelley
    @kbriankelley

  • RE: NTLM to Kerberos

    Sandesh (11/18/2008)


    NTLM is an authentication protocol used in various Microsoft network protocol implementations and supported by the NTLM Security Support Provider ("NTLMSSP"). Originally used for authentication and negotiation of secure...

    K. Brian Kelley
    @kbriankelley

  • RE: Windows User of SQL Stored Procedure executor

    I'm guessing you're using xp_cmdshell to access the folder? If so, it'll be the SQL Server service account which needs privileges if this procedure is called by someone with sysadmin...

    K. Brian Kelley
    @kbriankelley

  • RE: sa account

    EXEC sp_helprolemember 'role name';

    K. Brian Kelley
    @kbriankelley

  • RE: NTLM to Kerberos

    Greg Edwards (11/17/2008)


    We have port on MSSQLsvc with both netbios and FQDN and are running fine.

    What are the SPN's without the port for?

    We have MSOLAPsvc.3 setup without port numbers.

    Greg E

    If...

    K. Brian Kelley
    @kbriankelley

  • RE: NTLM to Kerberos

    Greg Edwards (11/17/2008)


    Besides the SPN's, the server will have to be allowed to delegate. And so will the domain user being used for the service.

    Note that to create an SPN,...

    K. Brian Kelley
    @kbriankelley

  • RE: Active Directory authentication

    Yes, you can. You can grant a Windows user or group access to SQL Server as a login. This is a good starting point from Books Online:

    Principals (Database Engine)

    I know...

    K. Brian Kelley
    @kbriankelley

  • RE: NTLM to Kerberos

    If there aren't any changes to the port configuration, then there are basically 4 SPNs you have to have set up (I'm assuming no changes to the port configuration):

    MSSQLSvc/*NetBIOS Name*...

    K. Brian Kelley
    @kbriankelley

  • RE: SA password issue

    As previously indicated, if you have any logins which are a member of the sysadmin fixed server role, those logins can reset the password either by using sp_password or ALTER...

    K. Brian Kelley
    @kbriankelley

  • RE: NTLM to Kerberos

    Erin (11/17/2008)


    The client & server are in the same domain. We ran the setspn stuff against the SQL startup account in AD and enabled kerberos delegation.

    I'm not sure how...

    K. Brian Kelley
    @kbriankelley

  • RE: Custom Password Policy Stored Procedure Needed

    No, I got that point, I think you might be missing mine. I'm not debating which method to use. The tally table/set-based one is clearly superior. I was speaking to...

    K. Brian Kelley
    @kbriankelley

  • RE: Custom Password Policy Stored Procedure Needed

    Jeff Moden (11/15/2008)


    It's not the close race that you said it was in the quote above... The point I was trying to make was that you tested wrong... you...

    K. Brian Kelley
    @kbriankelley

Viewing 15 posts - 826 through 840 (of 6,104 total)