Have Geek Brain

SQL Server 2008 mixed mode compatibility?

We are creating SQL Server 2008 Standard on a web server for the first time. We usually have our SQL Server on our local intranet and only use Windows Authentication.

What is the best way to authenticate to a web server? Can I use mixed mode without any security issue?

+1


a source to share


2 answers


While you will be very good at using mixed mode authentication, if your servers are all on the same domain, then you should strongly consider using Windows authentication.

Recommended best practice is to use Windows Authentication unless specifically required.



See SQL Server Books Online and, in particular, the security note "Use Windows Authentication When Possible":

http://msdn.microsoft.com/en-us/library/ms144284.aspx

+3


a source


Yes, unless you use "sa" for the application and you set the "sa" password very, very strong here. (Or rename "sa" and create a dummy "sa" account).



Most stores use mixed mode because web servers, firewalls, cross-domain issues, third party applications, etc. everyone conspired to prevent Windows authentication

+3


a source






More articles:


All Articles