user security

  • Hi

    I am new to a business and I am taking over a sql database that has no documentation.

    There is an sa user on the server that is used in some odbc connections (and maybe elsewhere) and I dont know the password.

    The only thing I can think to do to gain control of the user is to drop it and then create another that is identical with the same name.

    What risks do i face? do i have any other options? is there any way I can find out what the password is?

    Thanks in advance

  • The sa login cannot be dropped. There's also no way to obtain a password. If you have another sysadmin login, you can change the sa password.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • If Im logged in as sysadmin I can just change the password?

  • Yup.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply