Discussion Locked

Authentication in SQL Server 2000

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I'm currently testing SQL Server 2000. I installed one on a p.c running Windows 2000 Professional. I downloaded a sample program in planetsource code to view the tables and queries it works fine.. the clients can connect to my server. The problem isthe clients can connect to the SQL server even without a login and password created on the server. And when I try running the client program in the SQL server it won't log or run. Can anyone help me out? I created the account on the SQL Enterprise Manager. Is there any tutorial or guide on the net in working with SQL Server 2000?

2 replies

by joseph moore

I bet when you installed your SQL Server 2000 originally, you had it to accept either Windows Integrated Authentication or SQL Authentication logins, right?
Here is the deal. A new feature in SQL2K is Windows Authentication. You no longer need to make SQL Server-based login accounts. SQL2K can now use your existing Windows accounts to regulate who can access what.
Open Enterprise Manager, expand your server, then expand Security -> Logins.
Do you have any acounts there that have a Type called "Windows Group"? I will bet that you do. This is how users "clients can connect to the SQL server even without a login and password created on the server". What is probably happening is you have the Everyone group as a member of some Login group on the SQL server. With Everyone in a group with access, it is like having Anonymous access enabled on a web server; anyone can connect to the server as this unbrella account, with whatever rights it has.
So, check this out.

hope this helps

by mjackmond

The first answer is correct, SQL2000 defaults to "Windows Authentication" when installed. Client Programs control the connection scheme that is used; ODBC of some sort is usually used. Microsoft's SQL Website and the SQL Books Online (SQL Help) isthe best resource to use, as well as Microsoft's Data Access Website for ODBC.

This discussion is closed to new replies.