Link to home
Start Free TrialLog in
Avatar of Angusvicki
Angusvicki

asked on

How to remove or disable user account using FBA ( SQL Authentication ) on a MOSS 2007?

We have a MOSS 2007 installed with a multiple of site collections with FBA ( SQL Authentication ) enabled and now HR wants to remove or disable one user account from both SharePoint 2007 and SQL Membership database and which way is the easiest way to perform?
ASKER CERTIFIED SOLUTION
Avatar of GeorgeGergues
GeorgeGergues

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Angusvicki
Angusvicki

ASKER

Thanks George,

Q1. If I want to disable the user first, could I use SQL Management Studio to do it instead of using SQL Query?

Q2. I think I could find the ASPNET database name ( we lost the documentation ) from the Central Administration Web.config, right?

Q3. If the user I am going to disable is the user we added initially from the ASP.NET Web Site Admin Tool in order to connect membership data store, do you think it does matter?
OK  

Now be carefull here , this can be tricky

You can disable or change password using SQL  management

It is recommended to use Stored procedures on that dababase than just sql calls.

DB name by default would be ASPNET
you will find that in the web.config on the site itself.

the stored procedure is

 - Membership_UpdateUser

and to disable the account would be .
Is allowed = 0 or no or false etc.


I am sure you have some tool inside you site collection under user administration that would allow you to do that .

in any case the store procedure should do the trick

but it update the IsApproved column in the  [Membership] Table

Best of luck

Thanks again, George,


Is it possible to use ALTER LOGIN [user name] DISABLE to disable the user account so that I can revert in case of something happens?
I would change both the user name and email and make sure they are unique.
The user account we are going to disable is the user going to be terminated by HR so that we don't really care about email but we do concern about that user account may have impact with something elase so that is it possible to run the sql query from the ASPNET database as "ALTER LOGIN [user name] DISABLE" to disable that specified user account?  
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.