Showing posts with label logins. Show all posts
Showing posts with label logins. Show all posts

Thursday, February 16, 2012

Best Way to lockdown SQL Server 2000

I am looking for the best way to lockdown a SQL Server 2000 box. There are
current SQL logins used by exsisting software that have SA credentials.
Without changing creds or using a third part vendor is there something equal
to DDL triggers in 2005? Could I create a trace that always is on?
Thanks for reading.
JasonWhat do you mean exactly by saying "lockdown"?
You do not want anybody to be able to login to the SQL Server?
--
Ekrem Ã?nsoy
"SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
news:6312BD12-BC3A-4A7D-A665-52E4D8B6A46D@.microsoft.com...
>I am looking for the best way to lockdown a SQL Server 2000 box. There are
> current SQL logins used by exsisting software that have SA credentials.
> Without changing creds or using a third part vendor is there something
> equal
> to DDL triggers in 2005? Could I create a trace that always is on?
> Thanks for reading.
> Jason|||I want to prevent people from dropping objects
"Ekrem Ã?nsoy" wrote:
> What do you mean exactly by saying "lockdown"?
> You do not want anybody to be able to login to the SQL Server?
> --
> Ekrem Ã?nsoy
>
> "SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
> news:6312BD12-BC3A-4A7D-A665-52E4D8B6A46D@.microsoft.com...
> >I am looking for the best way to lockdown a SQL Server 2000 box. There are
> > current SQL logins used by exsisting software that have SA credentials.
> > Without changing creds or using a third part vendor is there something
> > equal
> > to DDL triggers in 2005? Could I create a trace that always is on?
> >
> > Thanks for reading.
> >
> > Jason
>|||Hi
If it uses SA you can do NOTHING.
"SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
news:68380513-CF06-492B-9786-9489EE864EBA@.microsoft.com...
>I want to prevent people from dropping objects
> "Ekrem ?nsoy" wrote:
>> What do you mean exactly by saying "lockdown"?
>> You do not want anybody to be able to login to the SQL Server?
>> --
>> Ekrem ?nsoy
>>
>> "SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
>> news:6312BD12-BC3A-4A7D-A665-52E4D8B6A46D@.microsoft.com...
>> >I am looking for the best way to lockdown a SQL Server 2000 box. There
>> >are
>> > current SQL logins used by exsisting software that have SA credentials.
>> > Without changing creds or using a third part vendor is there something
>> > equal
>> > to DDL triggers in 2005? Could I create a trace that always is on?
>> >
>> > Thanks for reading.
>> >
>> > Jason
>>|||There has to be something you can do to track changes for auditing besides
enable C2.
"Uri Dimant" wrote:
> Hi
> If it uses SA you can do NOTHING.
> "SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
> news:68380513-CF06-492B-9786-9489EE864EBA@.microsoft.com...
> >I want to prevent people from dropping objects
> >
> > "Ekrem ?nsoy" wrote:
> >
> >> What do you mean exactly by saying "lockdown"?
> >>
> >> You do not want anybody to be able to login to the SQL Server?
> >>
> >> --
> >> Ekrem ?nsoy
> >>
> >>
> >>
> >> "SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
> >> news:6312BD12-BC3A-4A7D-A665-52E4D8B6A46D@.microsoft.com...
> >> >I am looking for the best way to lockdown a SQL Server 2000 box. There
> >> >are
> >> > current SQL logins used by exsisting software that have SA credentials.
> >> > Without changing creds or using a third part vendor is there something
> >> > equal
> >> > to DDL triggers in 2005? Could I create a trace that always is on?
> >> >
> >> > Thanks for reading.
> >> >
> >> > Jason
> >>
> >>
>
>|||SA's permissions can't be changed. You should create a new user for this job
and give it necessary permissions on your database.
--
Ekrem Ã?nsoy
"SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
news:3DC6C042-01B1-4A39-AE8A-4B7A94038A8C@.microsoft.com...
> There has to be something you can do to track changes for auditing besides
> enable C2.
> "Uri Dimant" wrote:
>> Hi
>> If it uses SA you can do NOTHING.
>> "SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
>> news:68380513-CF06-492B-9786-9489EE864EBA@.microsoft.com...
>> >I want to prevent people from dropping objects
>> >
>> > "Ekrem ?nsoy" wrote:
>> >
>> >> What do you mean exactly by saying "lockdown"?
>> >>
>> >> You do not want anybody to be able to login to the SQL Server?
>> >>
>> >> --
>> >> Ekrem ?nsoy
>> >>
>> >>
>> >>
>> >> "SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
>> >> news:6312BD12-BC3A-4A7D-A665-52E4D8B6A46D@.microsoft.com...
>> >> >I am looking for the best way to lockdown a SQL Server 2000 box.
>> >> >There
>> >> >are
>> >> > current SQL logins used by exsisting software that have SA
>> >> > credentials.
>> >> > Without changing creds or using a third part vendor is there
>> >> > something
>> >> > equal
>> >> > to DDL triggers in 2005? Could I create a trace that always is on?
>> >> >
>> >> > Thanks for reading.
>> >> >
>> >> > Jason
>> >>
>> >>
>>|||Thanks but I was looking for some techinical guidance.
"Ekrem Ã?nsoy" wrote:
> SA's permissions can't be changed. You should create a new user for this job
> and give it necessary permissions on your database.
> --
> Ekrem Ã?nsoy
>
> "SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
> news:3DC6C042-01B1-4A39-AE8A-4B7A94038A8C@.microsoft.com...
> > There has to be something you can do to track changes for auditing besides
> > enable C2.
> >
> > "Uri Dimant" wrote:
> >
> >> Hi
> >> If it uses SA you can do NOTHING.
> >>
> >> "SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
> >> news:68380513-CF06-492B-9786-9489EE864EBA@.microsoft.com...
> >> >I want to prevent people from dropping objects
> >> >
> >> > "Ekrem ?nsoy" wrote:
> >> >
> >> >> What do you mean exactly by saying "lockdown"?
> >> >>
> >> >> You do not want anybody to be able to login to the SQL Server?
> >> >>
> >> >> --
> >> >> Ekrem ?nsoy
> >> >>
> >> >>
> >> >>
> >> >> "SQLCOW" <SQLCOW@.discussions.microsoft.com> wrote in message
> >> >> news:6312BD12-BC3A-4A7D-A665-52E4D8B6A46D@.microsoft.com...
> >> >> >I am looking for the best way to lockdown a SQL Server 2000 box.
> >> >> >There
> >> >> >are
> >> >> > current SQL logins used by exsisting software that have SA
> >> >> > credentials.
> >> >> > Without changing creds or using a third part vendor is there
> >> >> > something
> >> >> > equal
> >> >> > to DDL triggers in 2005? Could I create a trace that always is on?
> >> >> >
> >> >> > Thanks for reading.
> >> >> >
> >> >> > Jason
> >> >>
> >> >>
> >>
> >>
> >>
>

Friday, February 10, 2012

Best way to accomplish this - Move to new server

I just purchased a new server and I want to move all my
existing databases, DTS scripts, logins, etc to the new
server. What is the best/easiest/efficient way to
accomplish this?Easiest way is probably to restore a backup to the other server
or detach/attach
HOW TO: Move Databases Between Computers That Are Running SQL Server
http://support.microsoft.com/default.aspx?kbid=314546
INF: Moving SQL Server Databases to a New Location with Detach/Attach
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q224071
or use the Copy database wizard
INF: Understanding and Troubleshooting the Copy Database Wizard in SQL
Server 2000
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q274463
Also check out
INF: How To Transfer Logins and Passwords Between SQL Servers
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q246133
PRB: User Logon and/or Permission Errors After Restoring Dump
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q168001
INF: How to Resolve Permission Issues When a Database is Moved Between SQL
Servers
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q240872
PRB: "Troubleshooting Orphaned Users" Topic in Books Online is Incomplete
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q274188
--
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Mike Taylor" <mtaylor103@.hotmail.com> wrote in message
news:0b8c01c3d539$6a135590$a501280a@.phx.gbl...
> I just purchased a new server and I want to move all my
> existing databases, DTS scripts, logins, etc to the new
> server. What is the best/easiest/efficient way to
> accomplish this?|||Backup and Restore work well for me. Setup SQL Server on the new machine
with the same service pack as the existing one, and the same disk layout if
possible. Restore the Master and MSDB databases for your logins & DTS and
jobs etc. and any other DB's you have. If the DB's are large it may be
faster to de-attach/re-attach from one machine to the other.
It might be possible to just copy the OS files for the databases between the
machines if they have the same directory structure, but I've never tried
this.
Mike Kruchten
"Mike Taylor" <mtaylor103@.hotmail.com> wrote in message
news:0b8c01c3d539$6a135590$a501280a@.phx.gbl...
> I just purchased a new server and I want to move all my
> existing databases, DTS scripts, logins, etc to the new
> server. What is the best/easiest/efficient way to
> accomplish this?|||You may want to read this:
HOW TO: Move Databases Between Computers That Are Running SQL Server
http://www.sqlmantra.com/314546
--
Rohtash Kapoor
http://www.sqlmantra.com
"Mike Taylor" <mtaylor103@.hotmail.com> wrote in message
news:0b8c01c3d539$6a135590$a501280a@.phx.gbl...
> I just purchased a new server and I want to move all my
> existing databases, DTS scripts, logins, etc to the new
> server. What is the best/easiest/efficient way to
> accomplish this?|||sorry wrong link. The correct one is:
support.microsoft.com?kbid=314546
"Rohtash Kapoor" <rohtash_nospam@.sqlmantra.com> wrote in message
news:Ov0ldsT1DHA.3216@.TK2MSFTNGP11.phx.gbl...
> You may want to read this:
> HOW TO: Move Databases Between Computers That Are Running SQL Server
> http://www.sqlmantra.com/314546
> --
> Rohtash Kapoor
> http://www.sqlmantra.com
>
> "Mike Taylor" <mtaylor103@.hotmail.com> wrote in message
> news:0b8c01c3d539$6a135590$a501280a@.phx.gbl...
> > I just purchased a new server and I want to move all my
> > existing databases, DTS scripts, logins, etc to the new
> > server. What is the best/easiest/efficient way to
> > accomplish this?
>