Monday, March 26, 2012

Remove "guest" account in SQL Server 2000

Is there any reason not to drop the "guest" account in a user database?
Thanks!Hi
If you wnat that anyone who has LOGIN access to the server access your db
as well , so do not remove it.
Why not having that every Login has a specific User account within the
database(s) that they need access?
"BATMAN" <BATMAN@.discussions.microsoft.com> wrote in message
news:E3985296-2D19-47C8-8051-37B664065AD6@.microsoft.com...
> Is there any reason not to drop the "guest" account in a user database?
> Thanks!|||The guest user us required in master and tempdb. Guest is disabled in other
databases by default. You can disable guest with sp_dropuser and enable
with sp_adduser.
Hope this helps.
Dan Guzman
SQL Server MVP
"BATMAN" <BATMAN@.discussions.microsoft.com> wrote in message
news:E3985296-2D19-47C8-8051-37B664065AD6@.microsoft.com...
> Is there any reason not to drop the "guest" account in a user database?
> Thanks!|||Dan
> databases by default. You can disable guest with sp_dropuser and enable
> with sp_adduser.
Can you elaborate a little bit about disabling 'guest' user? If I create a
new database the 'guest' is there.
"Dan Guzman" <guzmanda@.nospam-online.sbcglobal.net> wrote in message
news:OprfYbV2HHA.5380@.TK2MSFTNGP04.phx.gbl...
> The guest user us required in master and tempdb. Guest is disabled in
> other databases by default. You can disable guest with sp_dropuser and
> enable with sp_adduser.
> --
> Hope this helps.
> Dan Guzman
> SQL Server MVP
> "BATMAN" <BATMAN@.discussions.microsoft.com> wrote in message
> news:E3985296-2D19-47C8-8051-37B664065AD6@.microsoft.com...
>|||> Can you elaborate a little bit about disabling 'guest' user? If I create a
> new database the 'guest' is there.
The guest user exists in all databases but is disabled by default in all
user databases. It can simply be ignored unless it needs to be enabled for
special reasons.
Note that dropping the guest user does not physically drop the user from the
database but only disables it. Only users who are explicitly granted
database access can access a user database when guest is disabled.
Similarly, adding the guest user enables it. Any login can access a
database with an enabled guest user. If the login was not explicitly
granted access, the guest user security context is used (which normally has
minimal public permissions).
Hope this helps.
Dan Guzman
SQL Server MVP
"Uri Dimant" <urid@.iscar.co.il> wrote in message
news:OhtIOSY2HHA.4880@.TK2MSFTNGP03.phx.gbl...
> Dan
> Can you elaborate a little bit about disabling 'guest' user? If I create a
> new database the 'guest' is there.
>
> "Dan Guzman" <guzmanda@.nospam-online.sbcglobal.net> wrote in message
> news:OprfYbV2HHA.5380@.TK2MSFTNGP04.phx.gbl...
>|||Thanks Dan for clarification.
"Dan Guzman" <guzmanda@.nospam-online.sbcglobal.net> wrote in message
news:%23jiS2ab2HHA.3640@.TK2MSFTNGP06.phx.gbl...
> The guest user exists in all databases but is disabled by default in all
> user databases. It can simply be ignored unless it needs to be enabled
> for special reasons.
> Note that dropping the guest user does not physically drop the user from
> the database but only disables it. Only users who are explicitly granted
> database access can access a user database when guest is disabled.
> Similarly, adding the guest user enables it. Any login can access a
> database with an enabled guest user. If the login was not explicitly
> granted access, the guest user security context is used (which normally
> has minimal public permissions).
> --
> Hope this helps.
> Dan Guzman
> SQL Server MVP
> "Uri Dimant" <urid@.iscar.co.il> wrote in message
> news:OhtIOSY2HHA.4880@.TK2MSFTNGP03.phx.gbl...
>

No comments:

Post a Comment