Solved

SQL Server authentication hashes

Posted on 2013-06-26
8
317 Views
Last Modified: 2013-07-15
I've been tasked with seeing which MSSQL Database accounts can query the table that stores the encrypted password hashes for SQL authentication accounts across MSSQL 2000, 2005 and 2008 instances? Please can you provide the exact table these hashes are stored in, I beleive it isnt the same for all versions of MSSQL?
0
Comment
Question by:pma111
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 2
8 Comments
 
LVL 16

Expert Comment

by:EvilPostIt
ID: 39277451
In SQL Server 2005 & 2008 its the sys.sql_logins table. Unfortunately I dont have a 2000 instance so cant check although it may be the same table....

I believe its only members of the sysadmins group which can see the contents of the password_hash column but I will have to check to make sure its correct.
0
 
LVL 3

Author Comment

by:pma111
ID: 39277458
That would be most useful, thanks.
0
 
LVL 16

Accepted Solution

by:
EvilPostIt earned 500 total points
ID: 39277465
In this article i found the line...
CONTROL SERVER permission is required to examine the password_hash column of sys.sql_logins.

So looks like the control CONTROL SERVER permission is required.

http://social.technet.microsoft.com/wiki/contents/articles/7937.password-audit-for-sql-server-logins-find-blank-or-common-passwords-for-sql-logins.aspx
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 16

Expert Comment

by:EvilPostIt
ID: 39277481
As a side note, probably a good idea for you to read the article i posted last as it looks along the lines of what you want to do...
0
 
LVL 16

Expert Comment

by:EvilPostIt
ID: 39278132
Is this answer sufficient or do require further clarification?
0
 
LVL 3

Author Comment

by:pma111
ID: 39278144
The only other thing was whether sys_logins may be "invisible" to a non sys admin, they claim the view isnt even there! Which I thought could be permissions related?
0
 
LVL 16

Expert Comment

by:EvilPostIt
ID: 39278295
A user who doesnt have the correct level of permissions see's the sql_logins table but the password_hash column is blank.

They will only see rows for the sa account and themselves. No other SQL logins will be visible.
0
 
LVL 16

Expert Comment

by:EvilPostIt
ID: 39293250
Is this clarification sufficient?
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SQL Server Trigger 8 38
SQL Throw Error 7 35
SCOM to SQL port 14xx failed? 1 32
SQL eating up memory? 16 42
In this article I will describe the Copy Database Wizard method as one possible migration process and I will add the extra tasks needed for an upgrade when and where is applied so it will cover all.
Ever wondered why sometimes your SQL Server is slow or unresponsive with connections spiking up but by the time you go in, all is well? The following article will show you how to install and configure a SQL job that will send you email alerts includ…
Via a live example, show how to backup a database, simulate a failure backup the tail of the database transaction log and perform the restore.
Viewers will learn how to use the SELECT statement in SQL to return specific rows and columns, with various degrees of sorting and limits in place.

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question