Solved

SQL Server authentication hashes

Posted on 2013-06-26
8
310 Views
Last Modified: 2013-07-15
I've been tasked with seeing which MSSQL Database accounts can query the table that stores the encrypted password hashes for SQL authentication accounts across MSSQL 2000, 2005 and 2008 instances? Please can you provide the exact table these hashes are stored in, I beleive it isnt the same for all versions of MSSQL?
0
Comment
Question by:pma111
  • 6
  • 2
8 Comments
 
LVL 16

Expert Comment

by:EvilPostIt
ID: 39277451
In SQL Server 2005 & 2008 its the sys.sql_logins table. Unfortunately I dont have a 2000 instance so cant check although it may be the same table....

I believe its only members of the sysadmins group which can see the contents of the password_hash column but I will have to check to make sure its correct.
0
 
LVL 3

Author Comment

by:pma111
ID: 39277458
That would be most useful, thanks.
0
 
LVL 16

Accepted Solution

by:
EvilPostIt earned 500 total points
ID: 39277465
In this article i found the line...
CONTROL SERVER permission is required to examine the password_hash column of sys.sql_logins.

So looks like the control CONTROL SERVER permission is required.

http://social.technet.microsoft.com/wiki/contents/articles/7937.password-audit-for-sql-server-logins-find-blank-or-common-passwords-for-sql-logins.aspx
0
 
LVL 16

Expert Comment

by:EvilPostIt
ID: 39277481
As a side note, probably a good idea for you to read the article i posted last as it looks along the lines of what you want to do...
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 
LVL 16

Expert Comment

by:EvilPostIt
ID: 39278132
Is this answer sufficient or do require further clarification?
0
 
LVL 3

Author Comment

by:pma111
ID: 39278144
The only other thing was whether sys_logins may be "invisible" to a non sys admin, they claim the view isnt even there! Which I thought could be permissions related?
0
 
LVL 16

Expert Comment

by:EvilPostIt
ID: 39278295
A user who doesnt have the correct level of permissions see's the sql_logins table but the password_hash column is blank.

They will only see rows for the sa account and themselves. No other SQL logins will be visible.
0
 
LVL 16

Expert Comment

by:EvilPostIt
ID: 39293250
Is this clarification sufficient?
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever needed a SQL 2008 Database replicated/mirrored/log shipped on another server but you can't take the downtime inflicted by initial snapshot or disconnect while T-logs are restored or mirror applied? You can use SQL Server Initialize from Backup…
For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
Using examples as well as descriptions, and references to Books Online, show the documentation available for date manipulation functions and by using a select few of these functions, show how date based data can be manipulated with these functions.
Viewers will learn how to use the INSERT statement to insert data into their tables. It will also introduce the NULL statement, to show them what happens when no value is giving for any given column.

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now