Web Wiz Support and Community Forums : Connect to SQL using Windows Authentication https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Mon, 06 Apr 2026 12:24:51 +0000 Thu, 11 Oct 2007 19:13:57 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=24605 <![CDATA[Web Wiz Support and Community Forums]]> https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ <![CDATA[Connect to SQL using Windows Authentication : Thanks Borg ]]> https://forums.webwiz.net/connect-to-sql-using-windows-authentication_topic24605_post128471.html#128471 Author: moti
Subject: 24605
Posted: 11 October 2007 at 7:13pm

Thanks Borg
]]> Thu, 11 Oct 2007 19:13:57 +0000 https://forums.webwiz.net/connect-to-sql-using-windows-authentication_topic24605_post128471.html#128471 <![CDATA[Connect to SQL using Windows Authentication : In an ideal world then you would...]]> https://forums.webwiz.net/connect-to-sql-using-windows-authentication_topic24605_post128465.html#128465 Author: WebWiz-Bruce
Subject: 24605
Posted: 11 October 2007 at 9:04am

In an ideal world then you would want to use trusted connections, but if you want to connect from web applications you need TCP/IP so you have to install in mixed mode.

It would be good if like in mySQL you can disable remote root connections, to do the same for SQL Server SA account.

However, if you have disabled remote connections then you shouldn't have any problem as no-one can log in externally, as an added protection rename the sa account. This should be enough security.
]]> Thu, 11 Oct 2007 09:04:38 +0000 https://forums.webwiz.net/connect-to-sql-using-windows-authentication_topic24605_post128465.html#128465 <![CDATA[Connect to SQL using Windows Authentication : Thanks borg I already blocked...]]> https://forums.webwiz.net/connect-to-sql-using-windows-authentication_topic24605_post128462.html#128462 Author: moti
Subject: 24605
Posted: 10 October 2007 at 8:59pm

Thanks borg
I already blocked SQL Remote ports and as you told me I will rename the SA account but is this enough for securing SQL ?
 
for example Microsoft says run SQL Services under a non administrator account or localsystem , but I use SQL Agent for running my jobs for daily backup and if the SQL Mixed Authentication is used the SQL Agent should have Administrative privilage to run ,
I don't know what to do ? to make sure my DB is secure.
 
Thanks


Edited by moti - 10 October 2007 at 9:01pm]]> Wed, 10 Oct 2007 20:59:26 +0000 https://forums.webwiz.net/connect-to-sql-using-windows-authentication_topic24605_post128462.html#128462 <![CDATA[Connect to SQL using Windows Authentication : You need to use SQL Authentication...]]> https://forums.webwiz.net/connect-to-sql-using-windows-authentication_topic24605_post128457.html#128457 Author: WebWiz-Bruce
Subject: 24605
Posted: 10 October 2007 at 5:41pm

You need to use SQL Authentication to be able to use TCP/IP, otherwise web applications like Web Wiz Forums can not connect to the database.

If you are worried about security in mixed mode you can always do things like disabling remote connections, rename the sa account and create a fake sa account with datareader only access on the temp db.

To change the login name for the SA account run the following SQL:-

ALTER LOGIN sa WITH NAME = [username];

Change username above to the new name you want for your SA account.

If you want remote access and use a Firewall you can also use the Firewall to limit access to the SQL Server to just your own IP or IP range, or that of the web server.
]]> Wed, 10 Oct 2007 17:41:33 +0000 https://forums.webwiz.net/connect-to-sql-using-windows-authentication_topic24605_post128457.html#128457 <![CDATA[Connect to SQL using Windows Authentication : I want connect my webwiz forum8...]]> https://forums.webwiz.net/connect-to-sql-using-windows-authentication_topic24605_post128448.html#128448 Author: moti
Subject: 24605
Posted: 10 October 2007 at 3:50pm

I want connect my webwiz forum 8 to SQL using SQL Windows Authentication not SQL Authentication, but I don't know how to write my connection strin in database_connection.asp  file
if anybody knows this let me know
 
Thanks
 


Edited by moti - 10 October 2007 at 3:51pm]]> Wed, 10 Oct 2007 15:50:26 +0000 https://forums.webwiz.net/connect-to-sql-using-windows-authentication_topic24605_post128448.html#128448