asked on 9/21/2018

change sa password without sysadmin priv

Hello,

I search to change password of sa account without control server role.

Thank you

Best regards

Microsoft SQL Server

Last Comment

bibi92

2/5/2019

David Johnson, CD

9/22/2018

Open SQL Server Configuration Manager
Stop the SQL Server Instance you need to recover the SA password
Open the properties on the SQL Server Instance and click on the Advanced tab
Change the Startup parameter by adding -m; at the begging of the line and click OK
Start the SQL Service Instance
Open the command prompt
Run sqlcmd and press enter
Run a Transact-SQL command to add an existing account or a new account to the sysadmin server role. Replace DOMAIN\Username with the account you want to add.

EXEC sp_addsrvrolemember 'DOMAIN\Username', 'sysadmin';
GO

Open in new window

Named pipes must be enabled for this to work.

Shaun Vermaak

9/23/2018

Opening SQL Server Management Studio as SYSTEM
https://www.experts-exchange.com/articles/30792/How-to-run-commands-using-SYSTEM-account.html

bibi92

9/23/2018

ASKER

Hello,

Sorry these comments don't answer the question, I search how ad account can change sa password without sysadmin or control server permission.

Thank you

Best regards

David Johnson, CD

9/24/2018

you have to have administrative permissions and be their physically on or via RDP to the machine that hosts the sql server program. If one could do it remotely then what would the value of having a password be since every script kiddie on the internet would have access to your data?

bibi92

9/24/2018

ASKER

Hello,

Sorry these comments don't answer the question, I search how ad account can change sa password without sysadmin or control server permission.

Thank you

Best regards

David Johnson, CD

9/24/2018

The answer is: You can't, plain and simple

bibi92

10/1/2018

ASKER

Hello,

With control server securable, it's possible to change sa password.

Best regards

David Johnson, CD

10/1/2018

what do you mean by control server securable? A user with local administrator privileges can backdoor their way in.

bibi92

10/6/2018