How to Reset a Lost SA Password in Microsoft SQL Server

Joseph HornseyDirector of IT & Infrastructure
CERTIFIED EXPERT
I built my first network in 1994 using PowerLAN.  From there I messed around with NetWare and then moved to Windows NT and Cisco.
Published:
This article explains how to reset the password of the sa account on a Microsoft SQL Server.  The steps in this article work in SQL 2005, 2008, 2008 R2, 2012, 2014 and 2016.
It's happened to all of us.  Someone installs a SQL server and then promptly forgets the sa password without documenting it.  Normally, it's not that big of a deal - just log in with a different account, right?  Oh, wait... there aren't any.

Recently, I ran into a scenario where a corrupt Active Directory had been rebuilt, however the SQL server logins got lost in the shuffle.  Consequently, there was no way to log into the SQL server except for the sa account, and that password was long-forgotten.  Fortunately, there's a way to fix this problem without reinstalling SQL and reattaching the databases.  

Microsoft SQL Server has the ability to launch in Single-User Mode.  In this mode, any account that is a member of the local Administrators group will be able to log in to the server with sysadmin privileges.  To launch in Single-User Mode, one must use a startup parameter for the SQL instance in question.

While in Single User Mode, only one user can be connected at a time (as the name would imply).  You'll connect and interact with the SQL instance from a command prompt using SQLCMD commands.

1. Open an elevated Command Prompt.

Admin-Cmd-Prompt.png2. Stop the SQL Instance.  The default is MSSQLSERVER.
net stop MSSQLSERVER

Open in new window



net-stop-mssqlserver.png3. Start the SQL Instance using the '/m' switch and specifying you'll use SQLCMD to interact with the instance.  The input following the '/m' switch is case-sensitive.  There's no indication you're connected in Single-User Mode, so don't worry if you don't see anything.
net start MSSQLSERVER /m"SQLCMD"

Open in new window


net-start-mssqlserver-with-m-sqlcmd.png

4. Connect to the instance with SQLCMD.  Just type 'sqlcmd' and hit <ENTER>.  You'll find yourself at a numbered prompt.  This means you're connected to the default instance.  If you want to specify a particular SQL instance, just use the appropriate SQLCMD switches.  The syntax will be:

sqlcmd -SServerName\InstanceName

Open in new window


sqlcmd-prompt-1.png

5. From here, you use Transact-SQL (T-SQL) commands to create a login.  I'm going to create a login called "RecoveryAcct" and give it the password "TempPass!".  Since you're issuing T-SQL commands directly, you'll need to use the 'GO' command, too.  There's no indication the command was successful; you just end up back at a '1>' prompt.  If you don't get an error, you can assume all is well.

CREATE LOGIN RecoveryAcct WITH PASSWORD=’TempPass!’
                      GO

Open in new window


sqlcmd-creat-login.png

6.  Now, use more T-SQL commands to add the user to the SysAdmin role.  Again, you'll need to use the 'GO' command and if you don't get an error, you can assume all is well.

SP_ADDSRVROLEMEMBER RecoveryAcct,’SYSADMIN’
                      GO

Open in new window


sqlcmd-add-role.png7. To exit SQLCMD, type 'exit' and hit <ENTER>.  Next, stop the SQL instance and then start it again without the '/m' switch so it is no longer in Single-User Mode.
net stop MSSQLSERVER && net start MSSQLSERVER

Open in new window


net-stop-and-net-start-mssqlserver.png8. Launch SQL Management Studio using SQL Authentication and log on as the user you just created.

sqlmgmtstud-logon-with-recovery.png9.  Now, you can look at your security settings and make the appropriate changes you need.  You'll see your recovery account listed.

sqlmgmtstud-user-tree.png
You can also use the SQL Server Management Studio if you're not comfortable with SQLCMD.  When you are starting the instance in Single-User Mode, you can always specify "Microsoft SQL Server Management Studio" instead of "SQLCMD" after the '/m' switch in step 3.
net start MSSQLSERVER /m"Microsoft SQL Server Management Studio"
                      GO

Open in new window


I hope this helps you out.  If so, please click on the blue and white "Good Article" button below.
 
6
31,584 Views
Joseph HornseyDirector of IT & Infrastructure
CERTIFIED EXPERT
I built my first network in 1994 using PowerLAN.  From there I messed around with NetWare and then moved to Windows NT and Cisco.

Comments (5)

Jim HornSQL Server Data Dude
CERTIFIED EXPERT
Most Valuable Expert 2013
Author of the Year 2015

Commented:
Well done.  Voting Yes.
Mark WillsTopic Advisor
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
Good Article and very well presented. Gets my YES vote :)
Very Good and Informative Article,
I have also gone through other blog as there are other ways to reset a Lost SA Password in Microsoft SQL Server.
Apart from recovering from manual way you can also use free software like SQL Password Recovery
SysToolsData Expert - Recovery,Backup,Migration

Commented:
Hey, such a great stuff!!!

If still facing a problem or not able to recover the password or looking for a quick solution have a look at this post

Ref:- https://www.experts-exchange.com/articles/32063/Know-How-to-Reset-SQL-Server-SA-Password.html
CERTIFIED EXPERT

Commented:
Thanks, this worked after starting the command line as system with the psexec command:  PsExec.exe -s -i cmd

Have a question about something in this article? You can receive help directly from the article author. Sign up for a free trial to get started.