Post reply

domain login with dollar sign

  • July 10, 2012 at 7:42 am

    #260913

    Hi guys, I've recently inherited a sql server and I've noticed there are quite a few logins like below

    domainname\servername$

    is this allowing access to any admin or user who has access to that server, currently I've disabled them but wanted to know why they've been setup like that.

    The old DBA has now left so can't really ask.

  • July 10, 2012 at 10:25 am

    #1511079

    I believe this is due to connections being made from a service on the remote server using integrated Auth and the service is running with "Local System" the the user.

    Bob
    -----------------------------------------------------------------------------
    How to post to get the best help[/url]

  • July 10, 2012 at 10:33 am

    #1511088

    and to add to what Robert has already mentioned the logins were in probability added to prevent login failure messages that may have been showing up in the error log.

    can you share the permissions that were granted to these logins? the logins were probably added only with public role access.

    you may see some stray instances of login failures after you have revoked access for these logins.

    Granting access to this logins (with $ name) is at best only a temporary workaround to resolve login failure errors.

  • July 10, 2012 at 1:53 pm

    #1511189

    Thanks guys, thats exactly right, I believe they've been added to solve a login problem as quite a few of the servers were just running under a local accounts not a domain account.

    And they all just had public security rights.

    Thanks for the help guys 🙂

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply