Solved

Windows Event Viewer has a lot of 'failure audit' events for failed logins

Posted on 2009-05-20
5
515 Views
Last Modified: 2012-05-07
I am receiving a lot of audits for people trying to access the SA account on SQL 2005. It looks to me to be from one IP address. I don't tend to use the SA account, so is this something I can rename or something similar? Would this stop the SA failed audits? I know it's probably a good idea to disable or rename the SA account so any help would be appreciated.
0
Comment
Question by:AbeSpain
  • 2
  • 2
5 Comments
 
LVL 41

Expert Comment

by:pcelba
ID: 24434160
The sa account renaming is a good idea and it increases security but it cannot stop attackers from their attemptes...
0
 
LVL 75

Accepted Solution

by:
Aneesh Retnakaran earned 500 total points
ID: 24434177
> Would this stop the SA failed audits?
no

If that ip doesnt belong to your network, possibly someone is trying to hack ur database, so better block those ip in your firewall

you can use the Windows authentication, that would be a great idea, but make sure that you chnage the connection string
0
 

Author Comment

by:AbeSpain
ID: 24434287
"you can use the Windows authentication, that would be a great idea, but make sure that you chnage the connection string "

Rather than auth using the users set up in the database?
0
 
LVL 75

Expert Comment

by:Aneesh Retnakaran
ID: 24434326
Yup. Windows authentication provides additional security, thats why i suggested you to use that.
0
 
LVL 41

Expert Comment

by:pcelba
ID: 24434494
The Windows authentication allows each Windows admin full SQL administrator access. I don't think this is correct in all situations.
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
migration MS SQL database to Oracle 30 61
SQL: launch actions one before the other 10 23
Run SQL Server Proc from Access 11 31
sql server tables from access 18 18
Everyone has problem when going to load data into Data warehouse (EDW). They all need to confirm that data quality is good but they don't no how to proceed. Microsoft has provided new task within SSIS 2008 called "Data Profiler Task". It solve th…
Why is this different from all of the other step by step guides?  Because I make a living as a DBA and not as a writer and I lived through this experience. Defining the name: When I talk to people they say different names on this subject stuff l…
Via a live example combined with referencing Books Online, show some of the information that can be extracted from the Catalog Views in SQL Server.
Via a live example, show how to extract insert data into a SQL Server database table using the Import/Export option and Bulk Insert.

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question