Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Administration (2000)
 Deny access to database- SQL standard logins

Author  Topic 

admin001
Posting Yak Master

166 Posts

Posted - 2006-12-27 : 13:07:28
Hi,

Is there any ways that I could disable /deny SQL standard logins in a similar that can be done for Windows accounts ? We have SQL 2000 servers with Enterprise edition. We are in the process of removing all SQL standard logins which are not in use anymore as part of the security audit process. I did check the sp_revokedbaccess script but it will remove the account from the database along with the application role privilege. For some reason if we have to revert it back for some accounts , it is difficuilt to revert back their privileges as the original info. will be lost. Any suggestions /alternative on how i can achieve this. Would be of great help.

Thanks a lot in advance.

snSQL
Master Smack Fu Yak Hacker

1837 Posts

Posted - 2006-12-27 : 13:25:36
How about just changing the password so that they cannot login any more.
Go to Top of Page

admin001
Posting Yak Master

166 Posts

Posted - 2006-12-27 : 13:50:20
Right. But i can't revert back to the original password if it is required to roll back. The password might be set somewhere in their apps or ODBC settings.

Thanks.
Go to Top of Page

snSQL
Master Smack Fu Yak Hacker

1837 Posts

Posted - 2006-12-27 : 14:28:49
I assumed you'd be able to change it there later if necessary.

Otherwise though, create a dummy login and use sp_change_users_login to change the login for a given user in the database to the dummy (and you can map users in multiple databases to that same dummy login). Then the logins will still work but they will not have access to the database/s. If you need to revert, just switch the user back to the old login.
Go to Top of Page

madhuotp
Yak Posting Veteran

78 Posts

Posted - 2006-12-27 : 23:39:37
Hi,

If u r using SQL Server 2005 , u can Enable/Disable logins.

eg.
ALTER LOGIN KittiLert ENABLE;


Madhu
Go to Top of Page
   

- Advertisement -