Hi, I'm having a problem whereby an admin account is getting locked out. In the security log on the domain controller I'm getting lots of "logon failures" stating that the source machines are our sql servers.Given that the servers run sql and not much else I can only assume that the errors are coming from within SQL somewhere. Can anyone advise what part of the program could be using a domain-level account and where I can check this? Many thanks, Huwy
One possibility you should explore is that someone has hacked the servers through SQL injection, and is trying to get at the rest of the network. Roy Harvey Beacon Falls, CT On Thu, 3 Jul 2008 16:03:07 +0100, "Huwy" wrote: >Hi, > >I'm having a problem whereby an admin account is getting locked out. In the >security log on the domain controller I'm getting lots of "logon failures" >stating that the source machines are our sql servers.Given that the servers >run sql and not much else I can only assume that the errors are coming from >within SQL somewhere. > >Can anyone advise what part of the program could be using a domain-level >account and where I can check this? > >Many thanks, > >Huwy >
Check the service accounts that the different SQL Server processes are running under. You can check this through SQL Server Configuration Manager - provided you are running SQL Server 2005. If you are running 2000, you can check it either in Enterprise Manager or through the Service Control Manager. Sincerely, Chuck Heinzelman SQL Server MVP "Huwy" wrote in message news:ezIc$4R3IHA.1420@TK2MSFTNGP06.phx.gbl... > Hi, > > I'm having a problem whereby an admin account is getting locked out. In > the security log on the domain controller I'm getting lots of "logon > failures" stating that the source machines are our sql servers.Given that > the servers run sql and not much else I can only assume that the errors > are coming from within SQL somewhere. > > Can anyone advise what part of the program could be using a domain-level > account and where I can check this? > > Many thanks, > > Huwy >
