January 19, 2004 at 9:20 am
We have an existing SQL Server 2000 SP3a/Win2k SP3 that had .Net 1.1 installed on it. After that every half hour messages appear in the event log saying Login failed for user 'sa'. Any help would be appreciated.
January 19, 2004 at 11:41 am
Start Profiler (Event : Security Audit - Audit Login Failed) to trace which application is tring to access your server with 'sa' login.
January 19, 2004 at 12:06 pm
Great idea but doesn't get me anywhere. Audit Login FailedLogin failed for user 'sa'.Microsoft(R) Windows (R) 2000 Operating Systemsa1032652004-01-19 14:00:00.650
January 19, 2004 at 12:12 pm
Do you run clustered SQL Server or non-clustered SQL Server? Any schedule jobs fail?
January 19, 2004 at 12:17 pm
This is non clustered. Nothing else is failing. This started RIGHT after they installed .NET 1.1 on this server. That is why I think it has something to do with the install but I cannot prove it.
January 19, 2004 at 12:20 pm
Can you post the result of "select loginname from syslogins" here?
January 19, 2004 at 12:35 pm
OK: sa BUILTIN\Administrators DUBLINNT\SQLITA1 dbadm02 WALTIR1 5 row(s) affected
January 19, 2004 at 12:42 pm
Have any linked servers configured to access this server? Any scheduled Window tasks? (Control panel --> Scheduled Tasks)
January 19, 2004 at 12:47 pm
No scheduled tasks, no linked servers, no DTS packages, no jobs using 'sa'
January 20, 2004 at 7:49 am
I ran into a similar issue once .NET was installed on one of our web servers. My issue was in the web.config file as that is where the credentials are declared. The sa password was causing the XML to be read improperly. This became evident once I noticed that other accounts/passwords would allow the app to function. The root cause was a special character % in the password of the sa account. I hope this helps.
January 20, 2004 at 9:23 am
I also have a Windows 2000 server with .Net 1.1 recently installed, but that had no effects on SQL Server. There are no strange login attempts. As far as I know .Net has no special relationship with Sqlserver.
What was the hostname of the sa login? I did not see it in your profiler output.
January 20, 2004 at 10:07 am
It just says Windows, no specifics like a servername or application name.
Viewing 12 posts - 1 through 11 (of 11 total)
You must be logged in to reply to this topic. Login to reply