sa password resets

[JLR1234]

I have a customer with an SQL Server 2000 database using Mixed Mode authentication and a password on the sa account. The users can access the database from a VB6 application without a problem for a few days. However, every few days they receive a "login failed for user sa" error. I reset the password on the sa account and they can access the db through the app again. But then a couple days later the same problem occurs.

Any idea why the sa password would keep resetting itself.

I have many other customers with the exact same setup that don't have this problem.

 

[SQLSister]

In the first place, I would never use sa as the connection string password. SA is only to be used for administrators. More than likely this is not the only database on the server and their own system admin is resetting sa (And probably mad that it keeps getting reset). Create a new appllication role and use that instead.

Or they could have a hacker targetting them. In which case all the passwords need to be changed.

Questions about posting. See faq183-874

 

[JLR1234]

The SQL Server is only housing the one database. It was purchased for our program and there are only two of us that have access to the SQL Server. Neither of us is changing the password.

Are you saying if a hacker is trying to get in to the database, that could change the sa password without us knowing?

 

[SQLSister]

I'm saying if a hacker knows your current sa password or other admin login, he could go in and change it himself.

Questions about posting. See faq183-874

 

[JLR1234]

I received this message from my customer. She provided more information this time. Any ideas?

The server restarted and I had to reset the SQL password again. This time, after looking in the System Event Viewer, I found out that “winlog.exe initiated the restart because the Remote Procedure Call (RPC) service terminated unexpectedly.”