SA Password

[sdamore]

I am running SQL 2000. Every once in a while the SA password will not work, even though it is a blank password. Enterprise manager will make me go back in, find the sa account and blank the password out again. I am not sure why this is doing this. Any help would be great

I am using MSWIN2K with sp2 and SQL2000 with SP2

Thanks
Scott

 

[tlbroadbent]

What login does Enterprise Mnager use? Doe it store the the password?

Why are you leaving the SA password NULL? Doing so leaves the entire PC open to attack - not just SQL Server. If you are on a network and the SQL Server is exposed to the Internet, it is vulnerable to SQL viruses. Even SQL personal edition or MSDE should be password proctected.

Leaving the SA password a NULL is simply bad policy. The destruction that can be done when there is no security isn't worth any perceived ease of operation.

See thread183-280043 - "SQL Server Security."
Terry L. Broadbent - DBA
Computing Links:

http://tlbroadbent.home.attbi.com/prog.htm

faq183-874 contains "Suggestions for Getting Quick and Appropriate Answers" to your questions.

 

[SQLSister]

Terry is absolutely right. Do not leave the password as Null. Also, do not give it out to anyone who is not the dba, especially do not give it to devlopers who will then use it to as the connection string to the user interface because that is easier than having to set permissions whenever they create a new object.

As to why it keeps losing the sa password as null. This does not happen randomly, someone is changing the password. It is either a DBA who is probably upset that you keep undoing his attempt to improve security or a hacker who is trying to mess with your system.