|
MSSQL can be installed without knowledge through the installation of 3rd party applications and utilities. Below are some ways to determine if MSSQL is installed and running.
1) Check your Services (located in the Administrative Tools folder in the Control Panel) or execute NET START at a DOS prompt and look for the existence of the MSSQLSERVER service. 2) Open a DOS prompt and run 'netstat -an' and look for the following
line: If #1 above is listed, you have a MSSQL installed. If #2 above is also valid, you have a MSSQL server installed that is also available over the network.
If only #1 is active, read how to setup a password on a MSSQL instance. If #2 is also active, you must not only set a password for your SQL users, but you must also install host based controls to limit the exposure of the MSSQL server to the general internet.
You should also walk through the SQLSecurity Checklist hosted at SQLSECURITY.COM
|
|
For assistance contact helpdesk@fnal.gov.
Information compiled and maintained by Computer Security Team ; last modified by TR on July 13, 2006. (Address comments about page to the Computer Security Team.) |