[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now


SQL server password

Posted on 2015-01-09
Medium Priority
Last Modified: 2015-01-26
So SQL is loaded on a server. Apparently no one knows what the password is to get into the server, imagine that. Does anyone know of anyway to get in?
SQL server authentication...
tried Windows auth and nothing...

Question by:dlewis61
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +3
LVL 25

Expert Comment

by:Lee Savidge
ID: 40540480
So you can't get into the server or the SQL install?
LVL 41

Expert Comment

by:Kyle Abrahams
ID: 40540483
From: http://msdn.microsoft.com/en-us/library/dd207004(v=sql.100).aspx

You can pass a -m or -f and then any local administrator on the box should be able to connect to it with windows authentication.  From there you can reset the SA password.

Step by step:
LVL 25

Expert Comment

by:Lee Savidge
ID: 40540496
Once you're on the box and loaded SQL Management Studio you should be able to issue this:

exec sp_password null, null, 'sa'

Pretty sure that's the syntax.
Are You Ready for GDPR?

With the GDPR deadline set for May 25, 2018, many organizations are ill-prepared due to uncertainty about the criteria for compliance. According to a recent WatchGuard survey, a staggering 37% of respondents don't even know if their organization needs to comply with GDPR. Do you?

LVL 75

Expert Comment

by:Aneesh Retnakaran
ID: 40540524
LVL 52

Expert Comment

by:Vitor Montalvão
ID: 40540613
All the solutions (links) provided only works if there's someone with sysadmin role otherwise SQL Server would have an huge security issue.
So dlewis61 if you or someone has sysadmin role to the SQL Server, he or she need to connect to the instance and give access to the others or at least activate sa login and reset his password.
Alternative is that the SQL Server service account is a domain account so you can connect to SQL Server with that account and provide the necessary access to you or to your colleagues.
LVL 41

Accepted Solution

Kyle Abrahams earned 2000 total points
ID: 40540749
Vitor - you are incorrect.

An administrator on the box CAN gain administrative control and reset the password of the sa account without ever knowing a password or being apart of the DB security roles.  Please see my link.  I too view this as a security hole but the powers at be (eg: Microsoft) allow this in case of a rogue user or a legit mistake.

Author Comment

ID: 40540751
It was the case that I could get in with windows authentication, but now I can't. I do not have sysadmin role. So I have to wait for those with god rights to get me going again.
LVL 43

Expert Comment

by:Eugene Z
ID: 40540945
what is your sql server version?
if sql 2005 + use the above links
if sql2000- if you are local admin on the box (same with sql 2005)
you maybe can access sql server ..
if not foe sql2000- you may need to reinstall master db (sql server) ...
LVL 52

Expert Comment

by:Vitor Montalvão
ID: 40543874
@Kyle: Yes, you're right. I did the test following the link you posted and worked. You can't perform any query but you can create a new login and give him sysadmin role. What a security hole!

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A Stored Procedure in Microsoft SQL Server is a powerful feature that it can be used to execute the Data Manipulation Language (DML) or Data Definition Language (DDL). Depending on business requirements, a single Stored Procedure can return differe…
Windocks is an independent port of Docker's open source to Windows.   This article introduces the use of SQL Server in containers, with integrated support of SQL Server database cloning.
Using examples as well as descriptions, and references to Books Online, show the documentation available for date manipulation functions and by using a select few of these functions, show how date based data can be manipulated with these functions.
Viewers will learn how to use the UPDATE and DELETE statements to change or remove existing data from their tables. Make a table: Update a specific column given a specific row using the UPDATE statement: Remove a set of values using the DELETE s…

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question