Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 General SQL Server Forums
 New to SQL Server Programming
 SA Password Change

Author  Topic 

stumbling
Posting Yak Master

104 Posts

Posted - 2008-10-20 : 18:02:29
Hi All

I recently was handed dumped what ever you want to call it, the DBA position and the old DBA is still employed via the company. Management are now locking his access down to a standard user on all applications and have asked me to investigate changing the password for the SA and relevent accounts with system admin privelages.
I am really after opinions and traps of what others have experienced doing this in the real world.
Any advice or experiences would be greatly appreciated.
We are using SQL 2000 at this stage.

Cheers
Phil

darkdusky
Aged Yak Warrior

591 Posts

Posted - 2008-10-21 : 09:23:38
The syntax for changing password is:
sp_password [ [ @old = ] 'old_password' , ]
{ [ @new =] 'new_password' }
[ , [ @loginame = ] 'login' ]
e.g.
sp_password 'currentPSWD', 'newPSWD'

You can check permissions of different user accounts by opening Security / Logins in Enterprise Manager. Right click on individual users and choose properties to check or modify access. You can also look under Server Roles to quickly check members of different Groups.

You should also be sure to check Windows Permissions. The dba may be a member of administrator group or the remote users group on the server itself which could allow him to still have significant access.

One thing you should be aware of is that changing passwords may affect / disrupt legitimate systems which have already been set up. Things to check are DTS's which use connections, DNS's in Windows, and also applications / website connection strings.

Go to Top of Page

bramirez
Starting Member

1 Post

Posted - 2008-12-01 : 00:28:04
How do I change the password if I don't know the old password. I have inherited a cold fusion project and the old developer/dba is unreachable. I need to log on to my local instance of SQL Server 2005 as the 'sa' user so I can see what tables/schemas are available. I can log on use the windows log on but I don't see the particular tables I am looking for. Does anyone know, is what I see as the sa user and windows login different?
Go to Top of Page

darkdusky
Aged Yak Warrior

591 Posts

Posted - 2008-12-01 : 05:31:48
In Sql Server Security check which roles your windows login is a member of. Also the BUILTIN\Administrators Group by default is a member of the sysadmin group - so if your windows login is an administrator on the windows machine it may already be have the same rights as "sa" i.e. a member of sysadmin.
There are sql password recovery tools on the web which can recover a password using brute force but if the password is longer than 5 characters it can take a very very long time for it to find password.
Go to Top of Page
   

- Advertisement -