SQL Server Forums
Profile | Register | Active Topics | Members | Search | Forum FAQ
 
Register Now and get your question answered!
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 How to remove the Windows authentication
 New Topic  Reply to Topic
 Printer Friendly
Next Page
Author Previous Topic Topic Next Topic
Page: of 2

cplusplus
Aged Yak Warrior

533 Posts

Posted - 01/02/2008 :  12:59:07  Show Profile  Reply with Quote
How to take off the windows authentication from authentication loggibg onto sql server.

If the user chooses windows authentication it does'nt force the user to enter password:

i want to eliminate that.

Can you please tell me what i should do on the server.

Thank you.

dinakar
Flowing Fount of Yak Knowledge

USA
2507 Posts

Posted - 01/02/2008 :  13:02:32  Show Profile  Visit dinakar's Homepage  Reply with Quote
If you need to remove Windows Authentication go to Server properties and check under Security.

Dinakar Nethi
************************
Life is short. Enjoy it.
************************
http://weblogs.sqlteam.com/dinakar/
Go to Top of Page

tkizer
Almighty SQL Goddess

USA
36615 Posts

Posted - 01/02/2008 :  13:06:26  Show Profile  Visit tkizer's Homepage  Reply with Quote
You can't remove Windows authentication. You can only remove SQL authentication.

And Windows authentication is much more secure than SQL authentication!

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/
Go to Top of Page

dinakar
Flowing Fount of Yak Knowledge

USA
2507 Posts

Posted - 01/02/2008 :  13:11:03  Show Profile  Visit dinakar's Homepage  Reply with Quote
quote:
Originally posted by tkizer

You can't remove Windows authentication. You can only remove SQL authentication.

And Windows authentication is much more secure than SQL authentication!

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/



thanks for catching that Tara. I thought the question was other way...

Dinakar Nethi
************************
Life is short. Enjoy it.
************************
http://weblogs.sqlteam.com/dinakar/
Go to Top of Page

cplusplus
Aged Yak Warrior

533 Posts

Posted - 01/02/2008 :  13:21:57  Show Profile  Reply with Quote
Thanks Tara...
Go to Top of Page

Michael Valentine Jones
Yak DBA Kernel (pronounced Colonel)

USA
7020 Posts

Posted - 01/02/2008 :  15:09:23  Show Profile  Reply with Quote
quote:
Originally posted by cplusplus
...If the user chooses windows authentication it does'nt force the user to enter password...


The user has to enter their password when they login to Windows, so they are already authenticated.



CODO ERGO SUM
Go to Top of Page

rmiao
Flowing Fount of Yak Knowledge

USA
7266 Posts

Posted - 01/02/2008 :  23:10:30  Show Profile  Reply with Quote
If you don't want to use windows authentication, don't create sql login for windows account.
Go to Top of Page

cplusplus
Aged Yak Warrior

533 Posts

Posted - 01/03/2008 :  11:13:56  Show Profile  Reply with Quote
Tara, I don't want to remove windows authenticaltion atleast if i chose windows authenticaltion it should atleast force me to enter the windows administrator password.

But instead the password field is disabled as if it already has the administrators password embedded into it.

because this is a terminal server, and i am creating lot of other users on that server, when they get to sql server login screen , there they have the windows account available they can just choose the windows authentication: right there it is presenting them:

machinename\administrator account.
which is not forcing them to enter the password. that is the problem i have.

Can you please tell me how i can remove the password from it. so that anyone chooses windows authentication they must enter valid password to logon to sql server mgmt console.

Thank you very much for all the helpful information you provide.
Go to Top of Page

jsmith8858
Dr. Cross Join

USA
7423 Posts

Posted - 01/03/2008 :  11:20:19  Show Profile  Visit jsmith8858's Homepage  Reply with Quote
They must not be logging into the Terminal server as the accounts you are setting up, but as the machine's administrator account! If you want to use these accounts you are setting up, change the administrator password and don't let anyone log into terminal services with that account.

- Jeff
http://weblogs.sqlteam.com/JeffS

Edited by - jsmith8858 on 01/03/2008 11:20:51
Go to Top of Page

tkizer
Almighty SQL Goddess

USA
36615 Posts

Posted - 01/03/2008 :  13:20:36  Show Profile  Visit tkizer's Homepage  Reply with Quote
cplusplus,

The password field is not something that we control inside SQL Server. Your server admin has configured the server to automatically logon with the admin account. Please work with him on removing this. If you can't figure it out, then I'd suggest posting your question on a Windows admin forum since this isn't SQL Server related.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/
Go to Top of Page

mdubey
Posting Yak Master

USA
133 Posts

Posted - 05/26/2008 :  22:35:24  Show Profile  Reply with Quote
I am thinking that, he/she is talking about to use only SQL not for Windows login.

If you are talking about this then In SQL 2000 there is a option in the server property and you do not use only Windows authontication you can use SQL authonitication. If you need both then use Mixed mode authontication mode.

In SQL 2005 there is only 2 options to choose.

Use Windows or Mixed mode.

Manoj
MCP, MCTS
Go to Top of Page

sodeep
Flowing Fount of Yak Knowledge

USA
7174 Posts

Posted - 05/26/2008 :  22:41:56  Show Profile  Reply with Quote
quote:
Originally posted by mdubey

I am thinking that, he/she is talking about to use only SQL not for Windows login.

If you are talking about this then In SQL 2000 there is a option in the server property and you do not use only Windows authontication you can use SQL authonitication. If you need both then use Mixed mode authontication mode.

In SQL 2005 there is only 2 options to choose.

Use Windows or Mixed mode.

Manoj
MCP, MCTS



Looks like you just learnt SQL server DBA.. SO naive!!!!!!
Go to Top of Page

tkizer
Almighty SQL Goddess

USA
36615 Posts

Posted - 10/22/2008 :  13:09:01  Show Profile  Visit tkizer's Homepage  Reply with Quote
appyks, it is not possible remove Windows authentication in SQL Server.

Also, this is a professional forum. Use professional language here rather than that net stuff.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

ghemant
Starting Member

India
22 Posts

Posted - 10/23/2008 :  08:32:29  Show Profile  Reply with Quote
quote:
when they get to sql server login screen , there they have the windows account available they can just choose the windows authentication: right there it is presenting them:

machinename\administrator account.
which is not forcing them to enter the password. that is the problem i have.



I think you are confusing yourself, as you said when they come to login screen it would asked them for password. But SQL Server has already authenticate them (as a domain user) and hense it will not ask them to log in.
AFAIK, whenever you create a login for a domain user and use them to access SQL Server the above statement holds true; and they will get access as per the permission assigned to them.

And yes, Mixed Authentication mode is recommended for security aspect.

I would suggest to refer below links for better understanding on Authentication and how they works
http://msdn.microsoft.com/en-us/library/aa905171(SQL.80).aspx
http://msdn.microsoft.com/en-us/library/aa905172(SQL.80).aspx

hth

Regards
Hemantgiri S. Goswami
MS SQL Server MVP
http://hemantgirisgoswami.blogspot.com/

Go to Top of Page

sodeep
Flowing Fount of Yak Knowledge

USA
7174 Posts

Posted - 10/27/2008 :  09:23:04  Show Profile  Reply with Quote
quote:
Originally posted by appyks

Hey Tkizer,hv u evr noticed der s a buiLt in user in SQL Servr caLLd BUILTIN\Administrators....?
ALL u wiL hv 2 do, go to
Enterprise Manager\Security\Logins...
find out de user BUILTIN\Administrators..
N remov tht user Login(BUILTIN\Administrators) which aLLows windows user to Log inSide de SQL Servr
N if requird protct de user SA wit PW
Try it out n Lt me kno,

I hope computer professionals can EASILY understand the net stuff as you did...

Its not that how we say,but what we say...

Hope this will solve both the problems...

,\ ]? ]? '/ ]<
quote:
Originally posted by tkizer

appyks, it is not possible remove Windows authentication in SQL Server.

Also, this is a professional forum. Use professional language here rather than that net stuff.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog




,\ ]? ]? '/ ]<



appyks,

By removing Built-in administrators,you are just preventing administrators of server to have sysadmin privileges upon installation. Also you cannot remove Windows authentication .

Edited by - sodeep on 10/27/2008 09:32:27
Go to Top of Page

homebrew
Posting Yak Master

114 Posts

Posted - 10/27/2008 :  09:27:32  Show Profile  Reply with Quote
"... Its not that how we say,but what we say..."

Incorrect. If someone is not a native English speaker, but makes a good attempt to explain themselves, that is far different from someone who is too lazy to use the language. I am not interested in deciphering any more code than I need to.
Go to Top of Page

homebrew
Posting Yak Master

114 Posts

Posted - 10/27/2008 :  10:52:22  Show Profile  Reply with Quote
" ... whats wrong in using some short cut to save time ..."

If time is crucial to the situation, then shortcuts may be called for. But in this case, where clarity is most important, then you saving 10 seconds of typing, is outweighed by the need for everyone else to clearly understand what's being said, and not be aggravated interpreting the text. Also, since these types of forums are often international, shortcuts that may seem obvious to you, may be very confusing to others.

Edited by - homebrew on 10/27/2008 10:55:00
Go to Top of Page

spirit1
Cybernetic Yak Master

Slovenia
11750 Posts

Posted - 10/27/2008 :  10:57:45  Show Profile  Visit spirit1's Homepage  Reply with Quote
putting it simply: continuous use of "leet" speak leads to account locking by me. your choice.

_______________________________________________
Causing trouble since 1980
Blog: http://weblogs.sqlteam.com/mladenp
Speed up SSMS development: www.ssmstoolspack.com <- version 1.1 out!
Go to Top of Page

tkizer
Almighty SQL Goddess

USA
36615 Posts

Posted - 10/27/2008 :  11:48:47  Show Profile  Visit tkizer's Homepage  Reply with Quote
quote:
Originally posted by appyks

And i hope removing BUILTIN\Administrators will solve his problem



That doesn't prevent users connecting with Windows authentication.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Subscribe to my blog
Go to Top of Page

Michael Valentine Jones
Yak DBA Kernel (pronounced Colonel)

USA
7020 Posts

Posted - 10/27/2008 :  11:57:47  Show Profile  Reply with Quote
quote:
Originally posted by appyks

homebrew

have you ever noticed there is a built in user in SQL Server called BUILTIN\Administrators....?
All you will have to do, go to
Enterprise Manager\Security\Logins...
find out the user BUILTIN\Administrators..
and remove that user Login(BUILTIN\Administrators) which allows windows user to Log inside the SQL Server
and if required protect the user SA with password
Try it out and let me know,

Happy.......?
no dear..its not the matter of lazyness but the matter of time...
time and tide wait for none,right..?
for me if you say something and i am able to understand what you are saying..,then the communication happend...
when whithout thoes ALPHABETS animals can communicate each other then whats wrong in using some short cut to save time...?

I am not here to talk about ENGLISH

Take care
,\ ]? ]? '/ ]<

quote:
Originally posted by homebrew

"... Its not that how we say,but what we say..."

Incorrect. If someone is not a native English speaker, but makes a good attempt to explain themselves, that is far different from someone who is too lazy to use the language. I am not interested in deciphering any more code than I need to.



® ,\ ]? ]? '/ ]< ©



There are just two problems with your answer.
1. It's hard to read. Either you don’t know how to spell, or you just are not bothering to spell correctly.
2. It is completely wrong. Removing BUILTIN\Administrators only removes that group. It does not remove Windows authentication.




CODO ERGO SUM
Go to Top of Page

cat_jesus
Aged Yak Warrior

547 Posts

Posted - 11/12/2008 :  15:56:21  Show Profile  Reply with Quote
quote:
Originally posted by cplusplus

How to take off the windows authentication from authentication loggibg onto sql server.

If the user chooses windows authentication it does'nt force the user to enter password:

i want to eliminate that.

Can you please tell me what i should do on the server.

Thank you.



One thing you could try is using the runas command to launch SSMS. This allows you to specify a user and it will prompt for a password.

But Tara is right, you should have a windows sysadmin fix that situation.


An infinite universe is the ultimate cartesian product.
Go to Top of Page
Page: of 2 Previous Topic Topic Next Topic  
Next Page
 New Topic  Reply to Topic
 Printer Friendly
Jump To:
SQL Server Forums © 2000-2009 SQLTeam Publishing, LLC Go To Top Of Page
This page was generated in 0.2 seconds. Powered By: Snitz Forums 2000