Cannot Alter Login

Donald Symmons 2,856 Reputation points
2022-05-15T10:37:24.603+00:00

I tried create new login password for "sa".
After expanding Security and Logins, the list of users were displayed on the left as shown in the screenshot below. But what I dont understand is,
*how come I have other user listed? I only created one user for the database, but I have 4 on the list:
cashgolds, quirverT, sa andTRVAL17
I only created "quirverT"
and in the screenshot, its only "sa" that has a red "X". and I tried to grant permission to "sa" but I got the error in the screenshot.
Ihave tired everything to grant permission to that user but seem not to get it right.

What surprises mw as well is the fact that the error I am getting while trying to create new account in my website has to do with user 'quirverT'

202037-login-failed.png

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
12,677 questions
Transact-SQL
Transact-SQL
A Microsoft extension to the ANSI SQL language that includes procedural programming, local variables, and various support functions.
4,552 questions
0 comments No comments
{count} votes

Accepted answer
  1. CathyJi-MSFT 21,086 Reputation points Microsoft Vendor
    2022-05-16T07:23:45.167+00:00

    Hi @Donald Symmons ,

    > how come I have other user listed? I only created one user for the database, but I have 4 on the list:

    Someone created these logins for some purpose. Such as created these logins for other peoples to connect to this SQL server instance.

    > and in the screenshot, its only "sa" that has a red "X". and I tried to grant permission to "sa" but I got the error in the screenshot.

    The sa login, short for system administrator, is one of the riskiest server-level principals in SQL Server. It’s automatically added as a member of the sysadmin fixed server role and, as such, has all permissions on that instance and can perform any activity. SQL Server by default, at installation, disables the 'sa' account. In fact, unless a connecting system absolutely requires the sa login, it’s best that the account remains disabled. Why did you want to enable ‘sa’ account?

    SA is system admin user and it is the highest level of user in system. If any user have to modify SA that user needs to have higher or equivalent rights as SA user. Users member of system admin group are can only change SA user. According to the error message, it seems you do not have the permission.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    0 comments No comments

2 additional answers

Sort by: Most helpful
  1. T. Kujala 8,701 Reputation points
    2022-05-15T10:46:19.63+00:00

    Hi @Donald Symmons ,

    Have you tried this?

    Open Sql Configuration Manager.  
    Select SQL Server Services.  
    On the right side, Select the instance.  
    Right click on it and open Properties.  
    In the Advanced tab attach ";-m" at the end of the Startup Parameters field.  
    Apply and restart the service.  
    Now you have privilege to enable "sa" user and modify its password.  
    Once done, remove ";-m" and restart the service.  
    

    More.


  2. Erland Sommarskog 100.9K Reputation points MVP
    2022-05-15T11:56:46.37+00:00

    The option -m as suggested by TKujala would set the SQL Server instance into single-user mode. I would not recommend that.

    Also, I am not sure that you are working with right instance. The screenshot you show seem to be from your local machine. But I seem to recall from another thread of yours, that the name you have in Object Explorer is with a hosting service, and thus this SQL Server instance runs on a computer at your hoster. To change the startup options, you would have to connect to this computer with Remote Desktop to run SQL Server Configuration Manager. SSCM only works with services on the local computer.

    However, I would not expect that your hosting service permit you to connect with Remote Desktop, and if they do, I wold not expect that you have Windows permissions to run SSCM.

    To continue on this theme, my assumption why you cannot change the password for sa is exactly what the error message says: you don't have permission. That is, your hoster is not giving you sysadmin access on the instance. I would also assume that the logins you see and you don't recognize have been create by your hoster for some purpose.

    I would recommend that you contact the support desk of your hosting service to get more clarity about this.

    0 comments No comments