Precedence Question: domain vs local password policy

When running SQL2K5 on W2K3 and creating a sql server login w/ both
CHECK_EXPIRATION and CHECK_POLICY set to ON, which password plicy will take
effect if there is both a local policy on that server and a domain policy
affecting that server? Generally, domain policy will take precedence over a
local policy, but SQL2K5 does not address this detail and which will take
effect. I've hunted down lots of documentation, but none of it seems clear.
Thanks.SQL Server doesn't deal with this issue. It simply hits the security API.
The domain policy will override the local policy which is by design in
Windows. SQL Server simply abides by what Windows enforces.
Mike Hotek
MHS Enterprises, Inc
http://www.mssqlserver.com
"DisgruntledTechGuy" <DisgruntledTechGuy@.discussions.microsoft.com> wrote in
message news:12CC258C-C990-47C0-A36D-6EEC39E42A03@.microsoft.com...
> When running SQL2K5 on W2K3 and creating a sql server login w/ both
> CHECK_EXPIRATION and CHECK_POLICY set to ON, which password plicy will
> take
> effect if there is both a local policy on that server and a domain policy
> affecting that server? Generally, domain policy will take precedence over
> a
> local policy, but SQL2K5 does not address this detail and which will take
> effect. I've hunted down lots of documentation, but none of it seems
> clear.
> Thanks.|||Thanks Mike. That's what I figured, but documentation out there was ambiguo
us.
"Michael Hotek" wrote:

> SQL Server doesn't deal with this issue. It simply hits the security API.
> The domain policy will override the local policy which is by design in
> Windows. SQL Server simply abides by what Windows enforces.
> --
> Mike Hotek
> MHS Enterprises, Inc
> http://www.mssqlserver.com
>
> "DisgruntledTechGuy" <DisgruntledTechGuy@.discussions.microsoft.com> wrote
in
> message news:12CC258C-C990-47C0-A36D-6EEC39E42A03@.microsoft.com...
>
>sql

Possible Hack Attempt - Guidence Needed

Dear All,
I run a trace what checks for "Audit Login Fail". To be honest I set it up
out of Interest, never expecting anything to come of it. Yesterday I was on
holiday and got in today to find that I have had some audit failures.
They go something like this:-
Login failed for user 'sa'
Login failed for user 'admin'
Login failied for user 'probe'
Login failed for user 'sql'
Login failed for user 'Nessus-Test-User'
There are clusters of these which are done within a second.
Therefore I have reported an attempted hack. Can anyone tell me if I have
jumped the gun here, and if not what can I do to trace the hacker.
Thanks
PeterDid you also check to see if any security scanning tools
were run on the server? Something like MBSA?
Generally there is an entry in the Windows event log when
running security scanning tools.
You can use a network sniffer to track login attempts.
You can find more information on securing SQL Server at the
SQL Server security center site:
[url]http://www.microsoft.com/sql/techinfo/administration/2000/security/default.asp[/ur
l]
-Sue
On Tue, 12 Apr 2005 03:13:02 -0700, "Peter Nolan"
<PeterNolan@.discussions.microsoft.com> wrote:

>Dear All,
>I run a trace what checks for "Audit Login Fail". To be honest I set it up
>out of Interest, never expecting anything to come of it. Yesterday I was on
>holiday and got in today to find that I have had some audit failures.
>They go something like this:-
>Login failed for user 'sa'
>Login failed for user 'admin'
>Login failied for user 'probe'
>Login failed for user 'sql'
>Login failed for user 'Nessus-Test-User'
>There are clusters of these which are done within a second.
>Therefore I have reported an attempted hack. Can anyone tell me if I have
>jumped the gun here, and if not what can I do to trace the hacker.
>Thanks
>Peter|||Thanks for your input Sue.
Unfortunatly I do not have any server access, and the person I needed to
speak to (Head of IT Security) is on holiday.
I have done some research and found that it was indeed a hack attempt (have
a look at http://www.nessus.org) however they could not actually get into th
e
database as the sa password is too tight. Thank you for the link to SQL
Security I have been though that before and have already put in the
requirements.
The though is that our Parent Company sometimes do security audits and this
maybe one of those, but we will know more tomorrow.
Anyway thank you again for your response.
Peter
"Sue Hoegemeier" wrote:

> Did you also check to see if any security scanning tools
> were run on the server? Something like MBSA?
> Generally there is an entry in the Windows event log when
> running security scanning tools.
> You can use a network sniffer to track login attempts.
> You can find more information on securing SQL Server at the
> SQL Server security center site:
> [url]http://www.microsoft.com/sql/techinfo/administration/2000/security/default.asp[/
url]
> -Sue
> On Tue, 12 Apr 2005 03:13:02 -0700, "Peter Nolan"
> <PeterNolan@.discussions.microsoft.com> wrote:
>
>

Possible causes for "login failed for user 'xyz' "

What are some of the possible causes for the following error :
Login failed for user 'xyz' assuming we have mixed mode of authentication on
SQL 2K.
I can think of just an incorrect password entered. Are there any more
reasons ?I'd think there will be some more detail in the error message. Is that all,
you are getting?
--
HTH,
Vyas, MVP (SQL Server)
http://vyaskn.tripod.com/
What hardware is your SQL Server running on?
http://vyaskn.tripod.com/poll.htm
"Hassan" <fatima_ja@.hotmail.com> wrote in message
news:OeEWPGEkDHA.1808@.TK2MSFTNGP09.phx.gbl...
What are some of the possible causes for the following error :
Login failed for user 'xyz' assuming we have mixed mode of authentication on
SQL 2K.
I can think of just an incorrect password entered. Are there any more
reasons ?|||We can get authenticated for some apps. I just have profiled some failed
logins and wanted to know what may some reason be for that error message
seen in text data column
"Narayana Vyas Kondreddi" <answer_me@.hotmail.com> wrote in message
news:%23fvMIHMkDHA.2416@.TK2MSFTNGP10.phx.gbl...
> I'd think there will be some more detail in the error message. Is that
all,
> you are getting?
> --
> HTH,
> Vyas, MVP (SQL Server)
> http://vyaskn.tripod.com/
> What hardware is your SQL Server running on?
> http://vyaskn.tripod.com/poll.htm
>
>
> "Hassan" <fatima_ja@.hotmail.com> wrote in message
> news:OeEWPGEkDHA.1808@.TK2MSFTNGP09.phx.gbl...
> What are some of the possible causes for the following error :
> Login failed for user 'xyz' assuming we have mixed mode of authentication
on
> SQL 2K.
> I can think of just an incorrect password entered. Are there any more
> reasons ?
>
>|||"Hassan" <fatima_ja@.hotmail.com> wrote in message
news:OeEWPGEkDHA.1808@.TK2MSFTNGP09.phx.gbl...
> What are some of the possible causes for the following error :
> Login failed for user 'xyz' assuming we have mixed mode of authentication
on
> SQL 2K.
> I can think of just an incorrect password entered. Are there any more
> reasons ?
Connectivity. If it takes a while for the error to appear, consider your
connectivity options.
Kind Regards, Howard