Emergency- SA Acct Locked, Cannot Use BUILTINAdministrators
Jul 5, 2007
SQL Server 2005, Windows Server 2003:
On our production db, the SA acct has been locked. I realize that I could enable mixed mode and then connect via an administrator -- but we are already running in mixed mode, and our BUILTINAdministrators account has sysadmin permissions turned off.
As it stands, the only user I can connect as does not have permission to modify any of the login info.
What recourse do I have at this point? Can I disable mixed-mode and re-enable it (via registry)? If so, will it reset the SA account or rebuild the BUILTINAdministrators login for me?
Or do I need to contact Microsoft, and if so is there anything they can do?
View 5 Replies
ADVERTISEMENT
Mar 24, 2006
I'd like to grant a WIndows account permission to connect to a db andexec stored procedures. But am having trouble.I want this type of effect but can't get the syntax correct:USE MyDBGOCREATE USER 127.0.0.1ASPNET --ASPNET Account for current machineGOGRANT EXECUTE ON AllStoredPRocs TO 127.0.0.1ASPNETHow is this done in a t-sql script?Thanks for any help.
View 1 Replies
View Related
Jul 20, 2005
I have my SQL 7.0 server set for Mixed security. I see now (finally)the advantages of having windows authentication security for windowsgroups.I do most of my developing in Access Projects which require a login ofsome type. I have been using my SQL login to develop with SQL andthen when I give it to the user, I set the project to use Windowsauthentication. I want to be able to have Windows authentication onmy domain account but the user name for my windows account is the sameas my SQL account and it won't let me change the existing account.Now what happens is after I develop the product I have to have theuser login and go in and change to windows authentication. It won'tlet me do it with my sql account.I fear that if I delete my sql account and create a windowsauthentication account all the views, sps, etc. that I have createdwill still have the reference to the sql login and therefore not work.Do I need to have a generic sql account for developing? One thought Ihad was to create a new domain account so I can create that windowslogin and at least get my most recent projects working like I want to?Hope this makes sense to someone.Thanks in advance for your time.Sherry
View 1 Replies
View Related
Nov 14, 2007
I've got a weird issue on my hands. I've got a 2 node/instance SQL 2005 SP2 Enterprise cluster on Server 2003 Enterprise, that's getting an odd event log error over and over. The service account that runs everything (SQL Services, Agent, Analysis Svcs, etc...) is a domain admin. The account is not locked out. SQL Server seems to be running fine. But, if you look in the SQL Server logs or the application logs, all you see are thousands of errors just like this:
Type: Failure Audit
Source: MSSQLSERVER
Event ID: 18456
Login failed for user 'domainServiceAccount'. [CLIENT: xxx.xxx.xxx.xxx]
(BTW - the ip addr in the error is of that virtual instance of SQL Server.)
On the Server Evt log, it only shows up in the App log. In the security log, all of the audits related to this service acct are successes.
It happens on both instances of the 2005 cluster. But my SQL 2000 cluster (which uses the same service account) is having no problems at all. I've tried everything I could think of to diagnose/fix the issue and just can't seem to figure it out.
- verify that BUILTINAdministrators is an SA in SQL
- verify that NT AUTHORITYSYSTEM is an SA in SQL
- verify that the service account is an admin on both physical boxes.
- verify that there are no 'deny' permissions set on any of the system databases for the service account (or the two above built in groups).
Any ideas? I can't find anything on the web about it that's helped so far. Basically everything seems to be negated by the fact that the account is NOT locked out and the fact that the account is a domain admin. Luckily it's not causing any problems for me (at the moment), but I'm trying to diagnose a different issue and I can't seem to shake the possibility that both of the issues are related.
View 3 Replies
View Related
Dec 27, 1999
Does anyone know who the builtinadministrators are by default in SQL Server 7 as part of the
system administrators.
View 1 Replies
View Related
Mar 4, 2002
Hi,
Are there any implications for removing this group from SQL Server logins?
We are trying to tighten up security and this is one area we want to focus on?
thanks
View 2 Replies
View Related
Jul 27, 2000
As default, the BUILTINAdministrators account is
created during the installation of SQL Server 7.0.
The default access is to have the account in
the System Administrators server role which gives
them dbo access to each database.
Since I don't want my network administrators to
have sa privleges within SQL but still want them
to be able to access the databases, I've removed
them from the System Administrators server role.
The SQL Server Login Properties window still shows
the account having access into each of the databases
as dbo, however they are unable to view or access
any objects within the databases.
Shouldn't the account still have permissions, just not
as sa? Can someone please explain this to me? I've checked
BOL and several of the reference books I have, but don't
find any detailed information on this account.
Thank you
Toni
View 1 Replies
View Related
Mar 20, 2002
Hi all,
I am using SQL 2k SP2 on Win 2K Advance server Cluster. My problem is how to remove builtinAdministrators login. Earlier when I tried it was doing failovers from one node to another and not stopping. I was not able to do anything. Any help is appriciated
thanks,
Minesh.
View 3 Replies
View Related
May 28, 2002
This message is in reference to a previously posted SLQ Server 7 question and answer regarding the BUILTINAdministrators account (dated 11/19/2001)
Original Question: I'm using Mix-Mode Authentication. Can I remove the Builtin/Administrator loggin ID
without cause any harm to my current Login ID user(Windows NT user)? Are will
removing Builtin/Administrator what harm will this cause to my server?
Answer to above: The first thing I do after installing SQL is remove the Builtin/Administrators account for
the SQL Server. Depending on how you set SQL up, this should not affect any NT
users, unless you granted them access to the server through the local Administrators
group. This is not the prefered way of granting access, however. This will give any
administrator on the machine access to all of the data, which you may not want,
depending on the confidentiality of the data.
Situation: (SQL Server using Mixed Mode Authentication).
If the Builtin/Administrators is disabled or deleted, and the server rebooted, SQL Server will be initiated but, the SQL Server Agent won't be.
Signing onto SQL Server as SA will not be able to restart SQL Agent nor will an NT user with administrator capability have any better luck
Question: What specifically in NT and SQL Server does one need to change to get around this situation.
The SQL Server documentation is not very helpful regarding the use of this login.
While attending a SQL 2000 Administrator course, two of my colleagues were told to always delete this account but were not given any reason or explained the consequence of this action.
View 1 Replies
View Related
May 1, 2007
We need to remove the BUILTINAdministrators from reporting services. I.T. personnel do not want to be able to see restricted reports. We have two department users that have been added as Content Managers and we are running reporting services under a created domain user account that we created and not a system service. I have removed BUILTINAdministrators from the Home folder and when I check, it comes right back. Do I need to deny access to BUILTINAdministrator on SQL Server 2005 itself? I would apprecate any suggestions.
View 1 Replies
View Related
Apr 3, 2008
Hi all,
After I removed the BuiltinAdministrators Group and changed the SQL Service Account from LocalSystem to my Window account this Openrowset query fail.
select a.*
from openrowset('MSOLAP',
'DATASOURCE=HODB02;Initial Catalog=POS_DM;', 'SELECT {[Measures].[SALE PRICE]} ON COLUMNS,
{[Item_Type].[Description].MEMBERS }ON ROWS
FROM [ONLINE SALES ANALYSIS]' ) as a
OLE DB provider "MSOLAP" for linked server "(null)" returned message "The following system error occurred: No connection could be made because the target machine actively refused it. .".
Is that relate the teh Security Account Delegation?
View 1 Replies
View Related
Jan 30, 2008
be not carefully, i deleted the BUILTINAdministrators group, and the 'sa' acount is disabled.
now i can login in use the other acount, but can't assign the roles and alter the login 'sa' to enable, beacause i do not have the premission.
how do i do, pls help me.
View 9 Replies
View Related
Feb 13, 2007
Hello all,
does someone know where to find information regarding what is accesible to a BUILTINAdministrator which is not accesible to a System Administrator?
Somewhere I have read that a System Administrator can not see the "All users' folders (i.e. the collection of "My folder"s for all users of the Report Server) but I have also experienced a behaviour which has surprised me: as a System Administrator with all permissions I cann't even see folders that a BUILTINAdministrator can.
Does it mean that a System Administrator can not really manage all the resources of a Report Server?
Any ideas will be welcomed. Many thanks.
View 1 Replies
View Related
Feb 14, 2007
Hello all,
We recently moved our Team Foundation Server from one server to another, of course the reporting services was also included in that move.
On the new server, we are not able to change Reporting Services security parameters anymore, we get this error :
User or group « BUILTINAdministrators » not recognized. (rsUnknownUserName)
The old server was an english windows 2003, the new one a french version, i guess the problem is related. The BUILTINAdministrators group name on the new server is "BUILTINAdministrateurs".
Is there a way to change security params without getting this error ? How can we remove from Reporting Services this reference to BUILDTINAdministrators ? I've tried to modify the table Users directly in ReportServer DB without any success..
Please help !
Alexandre
View 1 Replies
View Related
May 4, 2007
We have a server shared by two project teams. To tight the security, I want to remove BUILTINAdministrators off the public and sysadmin server roles. My question: any thing I should pay special attention ? I use LocalSystem to start all SQL Service. I know this is not a very good pratice yet I have no choice as our company network is a mixed of windows and novell, we do not have AD.
View 5 Replies
View Related
Aug 18, 2003
My os:
Window2000 + SQL Server 2000 Enterprise
User BUILTINAdministrators was delete. I can't use SQL Enterprise Manager.
Thank you.
View 2 Replies
View Related
Apr 22, 2008
I need to remove full admin privs from the builtinadministrator's group in report manager.
I tried removing the builtinadmin role from report manager and SQL Server, I removed it from the Site Settings area and from each individual folder's permissions.
Yet all the members of that group still have full run of the report server...
I even made a new folder that ONLY I am listed as having permissions to, yet they can see that as well...???
Suggestions?
View 8 Replies
View Related
Sep 4, 2006
Hello All,I am having trouble with a stored procedure I am working on. Just a little background, I am trying to do a GridView inside another GridView but the trouble I am having is that each row in the Parent GridView is display the entire Child GridView. What I want to do is basically for GridView1 (Parent) Row 1 should display GridView2 (Child) Row1. So I thought let me just pass three parameters.Any Help would be greatly apperciated Field – The Column I wantProject – The Project IDTPC – Name This is the stored procedure I am working on… CREATE PROCEDURE dbo.Portal_FinancialGetJanuary( @TPC nvarchar(50), @Project int @Field varchar(1000)) AS SET NOCOUNT ON SELECT @Field, MonthFROM Portal_FinancialForecastingWHERE(((Portal_FinancialForecasting.TPC) = @TPC) AND (Portal_FinancialForecasting.Month = 'January') AND (Portal_FinancialForecasting.Project = @Project))
View 2 Replies
View Related
Jul 25, 2000
hi,
i am getting problem in sql65, service pack5a.
for some tables in my database it is showing null. I cannot able to see the records in a table. I can see these tables in sysobjects table.
owner of the some tables is "null".
I executed following query to get the table name as well as owner.
select owner = user_name(uid), name , type
from sysobjects where name = 'published_docs'
Result:
owner name type
----- ----- -----
(null) published_docs u
--Pls give any ideas.
Dont say go to 65 discussion board(sorry i am in urgent)
thank you very much
--Devi
View 1 Replies
View Related
Oct 26, 2005
Hi all,
My window xp pro suddenly cannot reboot any more.
luckily, I can get into safe mode with command prompt.
So before doing any repair or even reinstallation of the op.
I need to back up my database using transact-sql in order to restore later on completely if have to reinstall my OP system.
I have MSDE installed on my computer. so osql.exe is available
for me to back up the database. I did before with the backup command, but it's a while ago. since this time the backup is so precious to me. I want you guys to back me up.
I will go to osql dir in C:program filesmicrosoft SQL server...
then issue:
backup database CMCTIS to disk='D:sqlbackupcmcbackup.dat'
CMCTIS is the database name and d:sqlbackupcmcbackup.dat is the file I want to use later on
to restore. Since if I will probably do repair or reinstallation, the information on C: will be wiped out or damaged. that's why I will use D: drive for the backup.
Please confirm.
So later on I can restore database completely including data and store procedures, database changes, right?
I have several databases and two server instances. I have to back up database one by one right?
Please reply at your earliest convenience. Otherwise I will lose all three month database work.
Betty
View 5 Replies
View Related
Mar 3, 2006
our one of our website is down. I try to reboot the server and restart the services. It didn't help. One of our user try to ftp. But also it said he has no permission on it. Do you know what can i do?
Thanks.
View 1 Replies
View Related
Nov 20, 2005
I have just deleted a clients database by mistake ( working too many hours this weekend!). I have recovered the actual files with Ontrack file recovery software.
I have tried to attach the mdf but SQL says it's not a valid sql database file. I have also created a new database of the same name , stopped sql, copied over the original files and re-started sql . SQL ( 2000) then marks the datbase as suspect.
Does anyone have a possible
thx
Stressed & Desperate.
No backups available . No lectures please... i've just learn't the VERY hard way !!
<edit> Moved to Data Corruption forum </edit>
View 5 Replies
View Related
Dec 4, 2006
Hi all!
I need an emergency help, I will have to give this assignment tomorrow...
what is the name of the function which makes this view:
I 1
F 2
I 4
C 2
F 3
I 1
C 1
into this:
I 6
C 3
F 5
Thanks,
Balázs
View 1 Replies
View Related
Dec 4, 2006
I don't know why the last topic is locked, but here is the situation more detailed.
I know that the group by is the answer for my last question.
But the situation is sadly not this easy:
We have a Donortype table and it looks like this:
D DONORTARGETQ1 DONORTARGETQ2 DONORTARGETQ3 DONORTARGETQ4
- ------------- ------------- ------------- -------------
C 400 400 500 500
F 300 350 400 500
I 125 150 200 275
3 rows selected.
The first column is called donortype. That's what we have to use.
The contribution table looks like this:
CONTRIBUT DONORID CONTRIBUTIONAMOUNT PROGRAMNAME MEMBERNUMB
--------- ---------- ------------------ ------------------------------ ----------
03-JAN-06 2 200 Basic Research 5
07-JAN-06 3 150 Applied Research 3
27-JAN-06 7 50 Teaching Programs 1
05-FEB-06 6 100 International Programs 2
23-FEB-06 2 50 International Programs 1
03-MAR-06 1 100 Basic Research 6
30-MAR-06 5 75 Basic Research 1
15-APR-06 6 50 Teaching Programs 4
09-MAY-06 4 100 Applied Research 2
14-MAY-06 7 100 International Programs 5
29-MAY-06 7 100 Applied Research 5
11-JUN-06 5 50 Teaching Programs 5
18-JUN-06 6 75 Applied Research 2
23-JUN-06 3 50 Basic Research 3
10-JUL-06 1 100 Teaching Programs 3
16-JUL-06 4 100 International Programs 2
22-JUL-06 6 75 Applied Research 4
15-AUG-06 5 60 Applied Research 1
23-AUG-06 2 150 International Programs 1
09-SEP-06 3 175 Applied Research 6
18-SEP-06 6 150 Teaching Programs 2
01-OCT-06 2 80 International Programs 5
13-OCT-06 1 50 Basic Research 6
30-OCT-06 5 25 Applied Research 1
11-NOV-06 4 100 Teaching Programs 4
24-NOV-06 2 100 Applied Research 5
10-DEC-06 7 200 Basic Research 1
20-DEC-06 3 85 International Programs 6
28 rows selected.
We have the DonorID and the ContributionAmount here.
We also have a Donor table:
DONORID DONORNAME D DONORPROJECTION
---------- ------------------------------ - ---------------
1 Crabtree I 50
2 Genetix C 100
3 Marlo I 55
4 Mervis F 60
5 Orange Computers C 50
6 Roper Foundation F 70
7 Keltron, Inc. C 85
7 rows selected.
The third column is DonorType as well.
What I have to create is something like this
DonorType ContributionAmount
I 100
F 300
C 250
Where the 100 is the sum of ContributionAmounts performed by DonorID-s which have a DonorType I
and 300 is the sum of ContributionAmounts performed by DonorID-s which have a DonorType F
and so on...
(the numbers are made up, they are probably not correct...)
My idea was that let's create a view with DonorID and sum(ContributionAmount) grouped by DonorID.
Than join this view with the DonorType table, and create a view which contains DonorId, DonorType and sum(ContributionAmount) from the first view.
And what now?! HOw do you group this by DonorType?
View 1 Replies
View Related
Jun 3, 2006
dear:
can anyone tell how to connect to Microsoft Mobile Server 2005 using System.Data.SqlceConnection or using System.oledbConnection connect to Microsoft Access DataBase in Pocket Pc or windows CE program?
dose there any minimum requirements i need to install?would you like to list a list for me
thanks alot.
View 1 Replies
View Related
Jun 15, 2006
Hello,
I have a big problem with Reporting Services 2005 working on Windows 2003 Server.
RS work as Network service, on subdomain reporting.mydomain with SSL wildcard certificate *.mydomain,
Anonymous access: disabled and basic authentication: enabled
ReportManager and reportServer has defualt virtual folders (/reporting, /reportserver)
My problem is:
1) I can't manage security roles and site settings with report maanger. when I try assign roles to new user or group I get followng error:
"The user or group name 'BUILTINAdministrators' is not recognized. (rsUnknownUserName) Get Online Help"
when i try to execute reports in report manager, parameters controls are not displayed correctly (very simple text boxes) and I can see:
The selected report is not ready for viewing. The report is still being rendered or a report snapshot is not available. (rsReportNotReady)
and I can't see my report in browser (IE 6.0) but only export to PDF, Excel...
other functionality are working fine i.e upload new files, creatign folders....
2) Also my reportserver virtual folder does not work correctly.
When I navigate to mydomain/reportserver I can see content of this virtual folder, than when I navigate to ReportService.soap i can see normal ReportServer view
reporting.mydomain - /Reportserver/
[To Parent Directory]
Montag, 10. April 2006 16:31 <dir> bin
Dienstag, 6. September 2005 01:12 488278 Catalog.sql
Dienstag, 6. September 2005 01:12 14738 CatalogTempDB.sql
Freitag, 21. April 2006 19:45 10555 Copy of rsreportserver.config
Freitag, 14. April 2006 17:29 76 global.asax
Freitag, 15. Juli 2005 01:12 26582 ModelGenerationRules.smgl
Montag, 10. April 2006 16:31 <dir> Pages
Montag, 10. April 2006 16:31 <dir> ReportBuilder
Montag, 13. Juni 2005 14:07 143 ReportExecution2005.asmx
Montag, 13. Juni 2005 14:06 196337 ReportingServices.wsdl
Montag, 13. Juni 2005 14:07 131 ReportService.asmx
Montag, 13. Juni 2005 14:07 131 ReportService.soap
Montag, 13. Juni 2005 14:07 139 ReportService2005.asmx
Dienstag, 13. Juni 2006 20:01 10580 rsreportserver.config
Montag, 13. Juni 2005 14:07 11845 rssrvpolicy.config
Montag, 10. April 2006 16:31 <dir> Styles
Freitag, 17. Juni 2005 01:09 2673 web.config
but me reports are not displayed correctly, I can run reports but top bar with parameters, export and print function are not displayed in correct format.
(simple textboxes, and icons)
reporting.mydomain/ReportServer - /
Microsoft SQL Server Reporting Services Version 9.00.1399.00
I think it is security issue. What schould i do to solve this problems?
Wojtek
View 7 Replies
View Related
Nov 16, 2000
I am trying to replicate between two servers. I am pushing a subscription to the other server. Of course this has to write to a file on the Servers hard drive before the actual replication. (It's actually trying to write a shared drive on the server) I have checked the permissions all day and I keep getting the same thing; 'The process could not create file [path to file] the network name cannot be found' What should I check? I have checked the permissions on the drive all the way down to the folder and It hasnt helped. I have checked the host files to make sure the ip address is correct in the file. I dont understand the network name error because it's trying to write to itself. Is there anyone out there that can help me???? PLEASE????
View 2 Replies
View Related
May 9, 2006
Dear All,
We have a big concern in our Database system. We have 2000 transactions daily in our database. We need to replicate some how the database for our fail over setup. I tried transactional replication at midnight but our all systems locked and we had a lot of complaints from the customers and It was taking a lot of time to snapshot part and I had to abort it because of these reasons.
I need an advice how I can create a replication or is there any other way to replicate or is there any way to do this process without bothering the system? Please give me some advice and help..
View 1 Replies
View Related
May 10, 1999
I have a 6.5 DB in which I lost a hard drive and have to recreate the Databases. I do have the original and latest device file ***.DAT which contains all of my application Data. Is there a way I can re-create the DB and point to use this device and keep my data???
A quick response is greatly appreciated!
View 1 Replies
View Related
Apr 15, 2008
Hi all - had a bit of a nightmare at work with order accounts application. Basically - all the orders have been set to uninvoiced and I need to set the ones which have been invoiced back to invoiced. Problem is that orders can be part invoiced.
Tables as follows:
orders
orderid PK int
invoiced int
orderline
orderid int
qty int
productid int
invoices
invoiceid PK int
orderid int
invoiceline
invoiceid int
qty int
productid int
There can be multiple invoices for each order
Question is - how can I write a query which updates the order table - set invoiced to 1 where there are the same amount of items in the order as in the related invoices?
Real emergency this one folks!
Hopefully someone can help me out!
Stephen.
View 8 Replies
View Related
Dec 4, 2006
I absolutely agree with you.
I managed to find the error, it was a typo.
Here is the code, if somebody is interested about it. It is oracle, not SQL server, but the idea is the same.
drop view a;
drop view b;
drop view figure5_9;
create view a
as
select d.donorID, dt.donortype, dt.donortargetq1
from donortype dt, donor d
where d.donortype=dt.donortype;
select * from a;
create view b
as
select a.donortype, sum(c.ContributionAmount) as amount
from Contribution c, a
where c.ContributionDate between '01-JAN-06' and '31-MAR-06' and a.donorID=c.donorID
group by a.donortype;
select * from b;
create view figure5_9
as
select b.donortype, a.donortargetq1, b.amount, b.amount/a.donortargetq1 as percentage
from a, b
where a.donortype=b.donortype
group by b.donortype, a.donortargetq1, b.amount;
select * from figure5_9;
Thanks for the help anyway ;-)
View 2 Replies
View Related
May 10, 2006
Dear All,We have a big concern in our Database system. We have 2000 transactionsdaily in our database. We need to replicate some how the database forour fail over setup. I tried transactional replication at midnight butour all systems locked and we had a lot of complaints from thecustomers and It was taking a lot of time to snapshot part and I had toabort it because of these reasons.I need an advice how I can create a replication or is there any otherway to replicate or is there any way to do this process withoutbothering the system? Please give me some advice and help..Thanksasa.
View 9 Replies
View Related
Feb 20, 2002
I have successfully restored my old MSSQL7.0 database from a computer that crashed - but the database is several months old. I do, however, have the most recent log files (*.ldf) - the actual log file and NOT a backup log file. Is there any way i can update my restored databse with the most recent .ldf files?
View 1 Replies
View Related
