What is the best way to change passwords

Question

What is the best way to change passwords

SQLBill

SSC Guru

Points: 51440
More actions
August 7, 2003 at 11:45 am

#101611

I have users that use SQL Server Authentication. They are at a remote facility and I would like to give them the ability to change their password and only their password. They do not have Enterprise Manager/Query Analyzer.
What is the best method for them to change their password?
-SQLBill

Viewing 10 posts - 1 through 9 (of 9 total)

You must be logged in to reply to this topic. Login to reply

gljjr SSChampion Points: 10080 More actions · Answer 1

I would create a small app that connects to SQL Server using their credentials and then have the app call sp_password to make the change. This way they will be able to change only their password.

Gary Johnson

Microsoft Natural Language Group

DBA, Sr. DB Engineer

Gary Johnson
Microsoft Natural Language Group
DBA, Sr. DB Engineer

This posting is provided "AS IS" with no warranties, and confers no rights. The opinions expressed in this post are my own and may not reflect that of my employer.

SQLBill SSC Guru Points: 51440 More actions · Answer 2

Thanks. I was thinking about using OSQL and sp_password. But now I'm considering creating a form in MS Access.

-SQLBill

rkurzweil SSC Veteran Points: 203 More actions · Answer 3

I use an Access program and run this command against the SQL Server:

strSQL = "sp_password NULL, '" & Me!txtPassword.Value & "', '" & strSQLUserName & "'"

Set cmd = New ADODB.Command

With cmd

.ActiveConnection = conn

.CommandType = adCmdText

.CommandText = strSQL

End With

cmd.Execute

Set cmd = Nothing

sp_password is in the master database.

Steve Jones - SSC Editor SSC Guru Points: 736193 More actions · Answer 4

I'd use an ASP page. Take the old and new, submit both to sp_password and get the success or failure.

Steve Jones

sjones@sqlservercentral.com

http://www.sqlservercentral.com/columnists/sjones

http://www.dkranch.net

SQLBill SSC Guru Points: 51440 More actions · Answer 5

I've never used ASP, where can I find information on how to set up an ASP page?

-SQLBill

Frank Kalis SSC Guru Points: 111183 More actions · Answer 6

Hi SQLBill

quote:
I've never used ASP, where can I find information on how to set up an ASP page?

for ASp is just a kind of VB that runs within a browser, you might take a look at some ASP Websites like

http://www.aspwire.com

http://www.15Seconds.com

http://www.4GuysFromRolla.com

http://www.asp101.com/

If this doesn't help, post again and we'll figure this out

Cheers,

Frank

--
Frank Kalis
Microsoft SQL Server MVP
Webmaster: http://www.insidesql.org/blogs
My blog: http://www.insidesql.org/blogs/frankkalis/[/url]

SQLBill SSC Guru Points: 51440 More actions · Answer 7

Thanks everyone.

I have some ideas now. I'm not sure ASP will work for me, I'll have to check into it more. I'm not allowed to use 'unapproved' software, so I need to find out exactly what ASP is. I'll check out the sites Frank posted. I'm also looking into testing Access since all my users have that.

-SQLBill

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 8

ASP = Active Server Pages

It's a scripting environment for IIS (started in 3.0, I believe). Try this for a resource:

http://4guysfromrolla.com

K. Brian Kelley

http://www.truthsolutions.com/

Author: Start to Finish Guide to SQL Server Performance Monitoring

http://www.netimpress.com/

K. Brian Kelley
@kbriankelley

Frank Kalis SSC Guru Points: 111183 More actions · Answer 9

Hi SQLBill,

quote:
I have some ideas now. I'm not sure ASP will work for me, I'll have to check into it more. I'm not allowed to use 'unapproved' software, so I need to find out exactly what ASP is. I'll check out the sites Frank posted. I'm also looking into testing Access since all my users have that.

since all your user have Access, I think this is the least common denominator and I think you get quicker a working result with it. Not that ASP programming is difficult, but a little bit different.

However, Access examples you can find here

http://www.uaex.edu/bknox/ms_access_logon.htm (there is a downloadable 2000 db)

http://www.gj.thorpe.btinternet.co.uk/login.htm (this one might be even better)

HTH

Cheers,

Frank

--
Frank Kalis
Microsoft SQL Server MVP
Webmaster: http://www.insidesql.org/blogs
My blog: http://www.insidesql.org/blogs/frankkalis/[/url]