Events
Mar 31, 11 PM - Apr 2, 11 PM
The biggest SQL, Fabric and Power BI learning event. March 31 – April 2. Use code FABINSIDER to save $400.
Register todayThis browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Applies to:
SQL Server
This article describes how to change the server authentication mode in SQL Server by using SQL Server Management Studio or Transact-SQL. During installation, SQL Server Database Engine is set to either Windows Authentication mode or SQL Server and Windows Authentication mode. After installation, you can change the authentication mode at any time.
If Windows Authentication mode is selected during installation, the sa
login is disabled and a password is assigned by setup. If you later change authentication mode to SQL Server and Windows Authentication mode, the sa
login remains disabled. To use the sa
login, use the ALTER LOGIN
statement to enable the sa
login and assign a new password. The sa
login can only connect to the server by using SQL Server Authentication.
The sa
account is a well known SQL Server account, and is often targeted by malicious users. Don't enable the sa
account unless your application requires it. It's important that you use a strong password for the sa
login.
You can enable the sa
login with SSMS or Transact-SQL.
In Object Explorer, expand Security, expand Logins, right-click sa, and then select Properties.
On the General page, you might have to create and confirm a password for the sa
login.
On the Status page, in the Login section, select Enabled, and then select OK.
In SQL Server Management Studio (SSMS) Object Explorer, right-click the server, and then select Properties.
On the Security page, under Server authentication, select the new server authentication mode, and then select OK.
In the SQL Server Management Studio dialog box, select OK to acknowledge the requirement to restart SQL Server.
In Object Explorer, right-click your server, and then select Restart. If SQL Server Agent is running, it must also be restarted.
Caution
The following examples use an extended stored procedure to modify the server registry. Serious problems might occur if you modify the registry incorrectly. These problems might require you to reinstall the operating system. Microsoft can't guarantee that these problems can be resolved. Modify the registry at your own risk.
The permissions required to change the authentication mode are sysadmin or CONTROL SERVER.
Change server authentication to Windows only:
USE [master]
GO
EXEC xp_instance_regwrite N'HKEY_LOCAL_MACHINE',
N'Software\Microsoft\MSSQLServer\MSSQLServer',
N'LoginMode', REG_DWORD, 1;
GO
Disable the sa
account:
USE [master]
GO
ALTER LOGIN sa DISABLE;
GO
Enable the sa
account and set a strong password:
USE [master]
GO
ALTER LOGIN sa ENABLE;
GO
ALTER LOGIN sa WITH PASSWORD = '<enterStrongPasswordHere>';
GO
Change server authentication to mixed mode:
EXEC xp_instance_regwrite N'HKEY_LOCAL_MACHINE',
N'Software\Microsoft\MSSQLServer\MSSQLServer',
N'LoginMode', REG_DWORD, 2;
GO
Events
Mar 31, 11 PM - Apr 2, 11 PM
The biggest SQL, Fabric and Power BI learning event. March 31 – April 2. Use code FABINSIDER to save $400.
Register todayTraining
Module
Configure database authentication and authorization - Training
Configure database authentication and authorization
Certification
Microsoft Certified: Azure Database Administrator Associate - Certifications
Administer an SQL Server database infrastructure for cloud, on-premises and hybrid relational databases using the Microsoft PaaS relational database offerings.