Solved

Windows Event Viewer has a lot of 'failure audit' events for failed logins

Posted on 2009-05-20
5
513 Views
Last Modified: 2012-05-07
I am receiving a lot of audits for people trying to access the SA account on SQL 2005. It looks to me to be from one IP address. I don't tend to use the SA account, so is this something I can rename or something similar? Would this stop the SA failed audits? I know it's probably a good idea to disable or rename the SA account so any help would be appreciated.
0
Comment
Question by:AbeSpain
  • 2
  • 2
5 Comments
 
LVL 41

Expert Comment

by:pcelba
ID: 24434160
The sa account renaming is a good idea and it increases security but it cannot stop attackers from their attemptes...
0
 
LVL 75

Accepted Solution

by:
Aneesh Retnakaran earned 500 total points
ID: 24434177
> Would this stop the SA failed audits?
no

If that ip doesnt belong to your network, possibly someone is trying to hack ur database, so better block those ip in your firewall

you can use the Windows authentication, that would be a great idea, but make sure that you chnage the connection string
0
 

Author Comment

by:AbeSpain
ID: 24434287
"you can use the Windows authentication, that would be a great idea, but make sure that you chnage the connection string "

Rather than auth using the users set up in the database?
0
 
LVL 75

Expert Comment

by:Aneesh Retnakaran
ID: 24434326
Yup. Windows authentication provides additional security, thats why i suggested you to use that.
0
 
LVL 41

Expert Comment

by:pcelba
ID: 24434494
The Windows authentication allows each Windows admin full SQL administrator access. I don't think this is correct in all situations.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

When you hear the word proxy, you may become apprehensive. This article will help you to understand Proxy and when it is useful. Let's talk Proxy for SQL Server. (Not in terms of Internet access.) Typically, you'll run into this type of problem w…
Slowly Changing Dimension Transformation component in data task flow is very useful for us to manage and control how data changes in SSIS.
Via a live example, show how to backup a database, simulate a failure backup the tail of the database transaction log and perform the restore.
Via a live example, show how to shrink a transaction log file down to a reasonable size.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now