I have not had any problems with running this script so far, at least nothing I know of, but then none of the customers do anyhting more complex than DTS and creating tables really. SQL 2005 still ha sthe same issue, but I did read something that there is a similar script provided.
BTW, none of my databases on any SQL server has a default guest user on them. Snake -----Original Message----- From: Joel [mailto:[EMAIL PROTECTED] Sent: 09 May 2006 00:54 To: CF-Talk Subject: RE: Big SQL security hole at Crystaltech? Hi Guys, The script you are after is http://support.microsoft.com/kb/889696/en-us (Run this script at your own risk, and pls test it on a dev server before running on a prod server) it only works on SQL 2000. I don't think they is one for 2005, haven't had much time to play with 2005 yet. By default guest is assigned to all the DB's hence everyone has access to all the DB on the server if you have access via EM, pls remove Guest from all DB's, now you will see only a list of DB's via EM and wont have access to them. I think they are two system DB's that you cant remove Guest from. Russ what side effects have you come across from running the MS script (hopefully I didn't read your post wrongly)? If anyone can share any info about 2005, that would be great. Joel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:239881 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
