Skip to main content
11 votes
Accepted

Locked my sa user out

There are two ways to handle this. One option is to login to the windows machine as a local administrator, start SQL Server in single user mode (-m startup switch) and you will now be able to get ...
Tibor Karaszi's user avatar
4 votes

CREATE Windows User in database for not existing domain

No, it isn't possible. SQL needs to contact the DC to collect the user/group SID and needs to save it inside the sys.server_principals table in master database.
MBuschi's user avatar
  • 4,560
3 votes

NTLM vs Kerberos authentication - questions

how can this be that while "Write ServicePrincipalName" privilege is turned off for the SQL service account, domain users are connecting using Kerberos auth That privilege is not required for ...
David Browne - Microsoft's user avatar
3 votes

Not Able to Enable sa Account in SQL Server 2019 Express after Login with Windows Authentication Mode

It looks like you don't have enough permissions to manage logins or anything else on the server. You can verify this by running this command: SELECT IS_SRVROLEMEMBER('sysadmin') It should return 1 if ...
spaghettidba's user avatar
  • 11.3k
3 votes

How to prevent logins using Windows Authentication in SQL Server?

Natively you cannot prevent using Windows Authentication in SQL Server. SQL Server supports two authentication modes, Windows authentication mode and mixed mode. Windows authentication is ...
SqlWorldWide's user avatar
  • 13.5k
2 votes
Accepted

NTLM vs Kerberos authentication - questions

Kerberos Authentication requires that you have Service Principal Names registered for the services being run by your service account to perform the exchange required for Kerberos authentication to ...
HandyD's user avatar
  • 9,982
2 votes

NTLM vs Kerberos authentication - questions

I can think of at least two ways this could be explained. Someone with adequate rights manually created the SPNs for instances 3 and 4. Instances 3 and 4 ran at least once under a service account ...
Doug Deden's user avatar
  • 1,817
2 votes

SSMS cannot connect remote server by IP through Windows authentication

So it turns out the timeout is actually a timeout... After I expend the connection timeout to 90 sec it connected after about a minute. Infrastructure guys say this might since it's trying to resolve ...
Circle Hsiao's user avatar
2 votes

Insert a record via VBA without SQL authentication

To clarify the goal here, I need to be able to allow any member of the firm to submit a job record. I cannot assume any knowledge of these users, including what Active Directories they may belong to. ...
David Browne - Microsoft's user avatar
2 votes

CREATE Windows User in database for not existing domain

When creating Logins or Users based on a Windows account, that Windows Login or Windows Group needs to be accessible as it's the source of the SID. Now, it is possible to create a Login by supplying ...
Solomon Rutzky's user avatar
2 votes

CREATE Windows User in database for not existing domain

The user is identified by the SID, not the name. See sys.database_principals. If the SID isn't possible to get to (either because it doesn't exist as a login or as in your case a domain controller isn'...
Tibor Karaszi's user avatar
2 votes

How to setup Linked Server connect with different Domain Account with Windows Authentication

No can do, I'm afraid. For a local Win login, you can point to a remote SQL login (including the password), or you can ask for impersonation/delegation meaning that the same win account/login will be ...
Tibor Karaszi's user avatar
1 vote

The target principal name is incorrect. Cannot generate SSPI context. (Microsoft SQL Server)

For those of you that run across this issue, the fix is to download the Kerberos configuration manager and run the autofix. You can find that tool at the following. https://learn.microsoft.com/en-us/...
Michael Daniels's user avatar
1 vote
Accepted

Can not login with windows authentication after changing sa and windows passwords

The error log you provided says: Could not find a login matching the name provided. So, my guess is that at some point that Administrator login was removed from SQL Server. To check that, please, ...
Ronaldo's user avatar
  • 5,091
1 vote

CREATE Windows User in database for not existing domain

I don't believe it's possible, as MBuschi mentioned the SID of the Domain User is required to create the Login on the server such that a User can be created in the database you're trying to add them ...
J.D.'s user avatar
  • 38.1k
1 vote

SSMS cannot connect remote server by IP through Windows authentication

The case number 4 (IP\MSSQLSERVER,port) is not necessary. However, the issue seems with security protocols/providers in windows level where SQL Service is running. Hope this post would help for ...
Shekar Kola's user avatar
  • 2,427

Only top scored, non community-wiki answers of a minimum length are eligible