Friday, March 23, 2012
remotely start/stop sql server service in a workgroup
in the same workgroup w/ a different admin pass (which i know ^_^, and
the sql sa pass too), how can i restart the sql server service from my box ?You can use xp_cmdshell with NET START/STOP MSSQLSERVER command. On you
command prompt type in NET START /? for details on this DOS command. For
details on xp_cmdshell, refer to SQL Server Books Online.
Anith|||Anith Sen wrote:
> You can use xp_cmdshell with NET START/STOP MSSQLSERVER command. On you
> command prompt type in NET START /? for details on this DOS command. For
> details on xp_cmdshell, refer to SQL Server Books Online.
>
xp_cmdshell is deleted(as recomended by every sql server security
quide), i can kill the process using pskill, but could that lead to data
loss?|||You can stop using the TSQL SHUTDOWN command.
At the OS level, you can both start and stop using NETSVC.EXE (Google for it
).
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
Blog: http://solidqualitylearning.com/blogs/tibor/
"Fred" <fred@.ilovespam.com> wrote in message news:exFBLGgHGHA.2036@.TK2MSFTNGP14.phx.gbl...[
color=darkred]
> hi, i have an administrator account on a box, there is a sql server pc
> in the same workgroup w/ a different admin pass (which i know ^_^, and
> the sql sa pass too), how can i restart the sql server service from my box ?[/colo
r]
Tuesday, March 20, 2012
Remote SQL admin across the internet
What is a secure way or accepted method to make database changes,IE: edit tables, add sprocs. ect. on a server being ran by an ASP.NET hosting service across the internet?
Thank you
-heywadeYou should check out theData Access Security section of "Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication" in Microsoft's Patterns & Practices series.
Terri|||Thanks Terri,
That is a great artical. Alot of that is out of My control though. An ASP.NET hosting service said that I would use Enterprize manager to admin My "would be" database across the internet. They didn't mention using SSL, also the use of IPSec wouldn't work on My end with NAT. So I guess I'll have to follow up with them. I didn't know the SSL would work with an SQL server...cool.
Thanks again
-heywade
Remote Server Login
that is hosting SQL Server 2000, do I have the ability using any
command-line tools such as OSQL or ISQL (that can be accessed remotely) to
add, delete, or change accounts
registered in SQL Server for the various databases if I don't have access to
a specific account within SQL Server?
I ask, because the question that came up was - what if we have a DBA leave
under less than amicable circumstances? Could I, someone who has admin
rights on the machine, be able to log into that machine remotely and somehow
via command line (I don't maintain active SQL clients centrally), change the
SA password, remove an account, and/or add an account with sysadmin rights,
etc?
Thanks in advance for any help -IF that person continues to have a valid login to SQL Server with
administrative priveleges, then he can do anything via OSQL he can do via
Query Analyzer or SQL Enterprise Manager..
So when someone leaves, we delete their login ( in SQL and/or Windows )
immediately and they can do us no harm..
--
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"ScottT" <jbell@.vitria.com> wrote in message
news:10ddv86i6ng5e47@.news.supernews.com...
> As a Sys Admin, I was wondering - if I have admin rights to a Win2k
machine
> that is hosting SQL Server 2000, do I have the ability using any
> command-line tools such as OSQL or ISQL (that can be accessed remotely) to
> add, delete, or change accounts
> registered in SQL Server for the various databases if I don't have access
to
> a specific account within SQL Server?
> I ask, because the question that came up was - what if we have a DBA leave
> under less than amicable circumstances? Could I, someone who has admin
> rights on the machine, be able to log into that machine remotely and
somehow
> via command line (I don't maintain active SQL clients centrally), change
the
> SA password, remove an account, and/or add an account with sysadmin
rights,
> etc?
> Thanks in advance for any help -
>
Remote Server Login
that is hosting SQL Server 2000, do I have the ability using any
command-line tools such as OSQL or ISQL (that can be accessed remotely) to
add, delete, or change accounts
registered in SQL Server for the various databases if I don't have access to
a specific account within SQL Server?
I ask, because the question that came up was - what if we have a DBA leave
under less than amicable circumstances? Could I, someone who has admin
rights on the machine, be able to log into that machine remotely and somehow
via command line (I don't maintain active SQL clients centrally), change the
SA password, remove an account, and/or add an account with sysadmin rights,
etc?
Thanks in advance for any help -IF that person continues to have a valid login to SQL Server with
administrative priveleges, then he can do anything via OSQL he can do via
Query Analyzer or SQL Enterprise Manager..
So when someone leaves, we delete their login ( in SQL and/or Windows )
immediately and they can do us no harm..
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"ScottT" <jbell@.vitria.com> wrote in message
news:10ddv86i6ng5e47@.news.supernews.com...
> As a Sys Admin, I was wondering - if I have admin rights to a Win2k
machine
> that is hosting SQL Server 2000, do I have the ability using any
> command-line tools such as OSQL or ISQL (that can be accessed remotely) to
> add, delete, or change accounts
> registered in SQL Server for the various databases if I don't have access
to
> a specific account within SQL Server?
> I ask, because the question that came up was - what if we have a DBA leave
> under less than amicable circumstances? Could I, someone who has admin
> rights on the machine, be able to log into that machine remotely and
somehow
> via command line (I don't maintain active SQL clients centrally), change
the
> SA password, remove an account, and/or add an account with sysadmin
rights,
> etc?
> Thanks in advance for any help -
>
Remote Server Login
that is hosting SQL Server 2000, do I have the ability using any
command-line tools such as OSQL or ISQL (that can be accessed remotely) to
add, delete, or change accounts
registered in SQL Server for the various databases if I don't have access to
a specific account within SQL Server?
I ask, because the question that came up was - what if we have a DBA leave
under less than amicable circumstances? Could I, someone who has admin
rights on the machine, be able to log into that machine remotely and somehow
via command line (I don't maintain active SQL clients centrally), change the
SA password, remove an account, and/or add an account with sysadmin rights,
etc?
Thanks in advance for any help -
IF that person continues to have a valid login to SQL Server with
administrative priveleges, then he can do anything via OSQL he can do via
Query Analyzer or SQL Enterprise Manager..
So when someone leaves, we delete their login ( in SQL and/or Windows )
immediately and they can do us no harm..
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"ScottT" <jbell@.vitria.com> wrote in message
news:10ddv86i6ng5e47@.news.supernews.com...
> As a Sys Admin, I was wondering - if I have admin rights to a Win2k
machine
> that is hosting SQL Server 2000, do I have the ability using any
> command-line tools such as OSQL or ISQL (that can be accessed remotely) to
> add, delete, or change accounts
> registered in SQL Server for the various databases if I don't have access
to
> a specific account within SQL Server?
> I ask, because the question that came up was - what if we have a DBA leave
> under less than amicable circumstances? Could I, someone who has admin
> rights on the machine, be able to log into that machine remotely and
somehow
> via command line (I don't maintain active SQL clients centrally), change
the
> SA password, remove an account, and/or add an account with sysadmin
rights,
> etc?
> Thanks in advance for any help -
>