?
Solved

SQL server password

Posted on 2015-01-09
9
Medium Priority
?
128 Views
Last Modified: 2015-01-26
So SQL is loaded on a server. Apparently no one knows what the password is to get into the server, imagine that. Does anyone know of anyway to get in?
SQL server authentication...
tried Windows auth and nothing...

Thanks
0
Comment
Question by:dlewis61
  • 2
  • 2
  • 2
  • +3
9 Comments
 
LVL 25

Expert Comment

by:Lee Savidge
ID: 40540480
So you can't get into the server or the SQL install?
0
 
LVL 41

Expert Comment

by:Kyle Abrahams
ID: 40540483
From: http://msdn.microsoft.com/en-us/library/dd207004(v=sql.100).aspx

You can pass a -m or -f and then any local administrator on the box should be able to connect to it with windows authentication.  From there you can reset the SA password.

Step by step:
http://community.spiceworks.com/how_to/show/22044-recover-sa-password-on-microsoft-sql-server
0
 
LVL 25

Expert Comment

by:Lee Savidge
ID: 40540496
Once you're on the box and loaded SQL Management Studio you should be able to issue this:

exec sp_password null, null, 'sa'

Pretty sure that's the syntax.
0
Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

 
LVL 75

Expert Comment

by:Aneesh Retnakaran
ID: 40540524
0
 
LVL 53

Expert Comment

by:Vitor Montalvão
ID: 40540613
All the solutions (links) provided only works if there's someone with sysadmin role otherwise SQL Server would have an huge security issue.
So dlewis61 if you or someone has sysadmin role to the SQL Server, he or she need to connect to the instance and give access to the others or at least activate sa login and reset his password.
Alternative is that the SQL Server service account is a domain account so you can connect to SQL Server with that account and provide the necessary access to you or to your colleagues.
0
 
LVL 41

Accepted Solution

by:
Kyle Abrahams earned 2000 total points
ID: 40540749
Vitor - you are incorrect.

An administrator on the box CAN gain administrative control and reset the password of the sa account without ever knowing a password or being apart of the DB security roles.  Please see my link.  I too view this as a security hole but the powers at be (eg: Microsoft) allow this in case of a rogue user or a legit mistake.
0
 

Author Comment

by:dlewis61
ID: 40540751
It was the case that I could get in with windows authentication, but now I can't. I do not have sysadmin role. So I have to wait for those with god rights to get me going again.
0
 
LVL 43

Expert Comment

by:Eugene Z
ID: 40540945
what is your sql server version?
if sql 2005 + use the above links
if sql2000- if you are local admin on the box (same with sql 2005)
you maybe can access sql server ..
if not foe sql2000- you may need to reinstall master db (sql server) ...
0
 
LVL 53

Expert Comment

by:Vitor Montalvão
ID: 40543874
@Kyle: Yes, you're right. I did the test following the link you posted and worked. You can't perform any query but you can create a new login and give him sysadmin role. What a security hole!
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It is possible to export the data of a SQL Table in SSMS and generate INSERT statements. It's neatly tucked away in the generate scripts option of a database.
The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.
Via a live example, show how to extract insert data into a SQL Server database table using the Import/Export option and Bulk Insert.

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question