2 replies
by joseph moore
I bet when you installed your SQL Server 2000 originally, you had it to accept either Windows Integrated Authentication or SQL Authentication logins, right?
Here is the deal. A new feature in SQL2K is Windows Authentication. You no longer need to make SQL Server-based login accounts. SQL2K can now use your existing Windows accounts to regulate who can access what.
Open Enterprise Manager, expand your server, then expand Security -> Logins.
Do you have any acounts there that have a Type called "Windows Group"? I will bet that you do. This is how users "clients can connect to the SQL server even without a login and password created on the server". What is probably happening is you have the Everyone group as a member of some Login group on the SQL server. With Everyone in a group with access, it is like having Anonymous access enabled on a web server; anyone can connect to the server as this unbrella account, with whatever rights it has.
So, check this out.
hope this helps
by mjackmond
This discussion is closed to new replies.
Trending Networks posts
Sort by Trending