Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 General SQL Server Forums
 New to SQL Server Programming
 securing SQL server

Author  Topic 

AskSQLTeam
Ask SQLTeam Question

0 Posts

Posted - 2006-06-07 : 08:27:12
Rayd Abdou writes "hi all, i have an SQL server at my home and i think i got hacked from it :( and i really want to know what to do to secure the SQL Server from, disable permissions ?
what commands ?

Thanks for helping me..
Rayd."

mr_mist
Grunnio

1870 Posts

Posted - 2006-06-07 : 09:01:25
I'd recommend rebuilding your machine if you haven't already.

Then, get yourself some kind of firewall. Enable windows firewall if nothing else. Screen off the SQL Server port to external access.

Make sure you are running the latest service pack and hotfix. For 2000, that would be SP4 + 2187 (I think). For 2005, SP1 is available.

Check the access to your server. Add in the service account and your logins to the sysadmin role and then remove the builtin\administrators group. Make sure the SA password is complicated.



-------
Moo. :)
Go to Top of Page

Kristen
Test

22859 Posts

Posted - 2006-06-07 : 09:44:49
Perhaps move the SQL port to something other than the default too

Kristen
Go to Top of Page

jen
Master Smack Fu Yak Hacker

4110 Posts

Posted - 2006-06-07 : 20:58:29
if it's sql2005, don't allow remote connections

if it's sql2000, additional suggestion is to use windows authentication only

--------------------
keeping it simple...
Go to Top of Page
   

- Advertisement -