Chapter 1 Securing Your Server and Network (7): Disable SQL Server Browse and chaptersecuring

Chapter 1 Securing Your Server and Network (7): Disable SQL Server Browse and chaptersecuring
Source: Workshop

Without the consent of the author, no one shall be published in the form of "original" or used for commercial purposes. I am not responsible for any legal liability.

Previous Article: http://blog.csdn.net/dba_huangzj/article/details/38082123

 

Preface:

 

The SQL Server Browser Service is automatically started when an SQL Server cluster or named instance is installed. It is used to interact with the SQL Server instance on the machine, the client sends information by naming the port on which the instance is listening. To block an SQL Server instance, you can stop the instance or configure it to not respond to broadcast requests.

 

Implementation:

 

When upgrading SQL Server, installing SQL Server to a cluster environment, and installing named instances, SQL Server Browser will automatically start. You can follow these steps to check whether the instance is running and disable it:

Data Source= SQL1,8200;Initial Catalog=AdventureWorks2012;User Id=fred;Password=#Fr3d!;

Source: Workshop

 

Principle:

 

The default instance listens to port 1433. If a named instance is installed, a port is dynamically allocated when the service is restarted/started. to access this port and start a TCP session, the client sends a request to the UDP port 1434 listened by the SQL Server Browser.

In addition, the client sends a broadcast request to the network to search for available SQL Server instances. The SQL Server Browser is responsible for responding to such requests. If there is only one instance, SQL Server Browser is unnecessary and is disabled by default. Disabling Browser in Multi-instance environments improves security.

 

For more information:

 

If you want to retain the dynamic port function but want to shield the instance, you can enable SQL Server Browser to not display the SQL Server instance, you only need to open the SQL Server network configuration node in [SQL Server Configuration Manager], right-click the [Protocol for <Instance name>], and open [properties ], on the "Hide instance" Page, select "yes.

How can I Install SQL server 2005 in win7? It is best to add it. Otherwise, I cannot understand it.

Complete installation:
I. install and configure IIS
SQL server 2005 requires IIS support. In "enable or disable windows components", select Internet information service, and then select the following components:
1. Web management tools IIS 6 management compatibility IIS 6 WMI compatibility
2. Web management tools IIS 6 management compatibility IIS 6 metabase and IIS 6 configuration compatibility
3. World Wide Web service application development function Asp.net
4. Http redirection for common Http functions of the World Wide Web Service
5. Windows authentication for World Wide Web Service Security
Confirm and install IIS.
Ii. Install SQL Server 2005 Standard Edition
Follow the prompts to install
Iii. Install SQL Server 2005 SP3
After installing SQL server 2005, we may not be able to log on when logging on to SQL, and the system prompts 18456 login error. Our administrator no longer has the permission to log on to SQL server. this requires you to download SQL server 2005 SP3 from the Microsoft website and install it on your computer.
4. Enable the SQL Server Browser Service
Click Start, point to programs, Microsoft SQL Server 2005, and configuration tools, and click SQL Server peripheral application configurator ".
On the "SQL Server 2005 peripheral application configurator" page, click "service and connected peripheral application configurator ".
On the "service and connected peripheral application configurator" page, click "SQL Server Browser", click "automatic" in "Startup Type", and then click "application ".
5. Exceptions for creating a firewall
Open Windows firewall, click Start, click Run, type firewall. cpl, and then click OK ".
Create exceptions for SQL Server 2005 and SQL Server Browser in Windows Firewall.
6. Configure SQLServer2005 remote connection
1: SQL Server Configuration Manager-> SQL Server 2005 Services: Set SQL Server Browser to running,
If no Enable exists, right-click Properties> Service> StartMode = Auotomatic.
Note that the SQL Server Browser Service must be enabled at the same time.

2: SQL Server 2005 Network Configuration-> using TCP/IP and named pipes at the same time under Protocols for SQLXPRESS

3: SQL Native Client Configuration uses both TCP/IP and named pipes

4. Change the logon mode to hybrid mode:
Choose manage Manager> connect to the database in windows> right-click your Data server> Properties> security> select SQL server and windows Authentication

5. Create a user name and password for SQL server:
Manage Manager-> security-> right-click logins-> new login... -> Select SQL server authentication-> set login name, password (confirm password), and default database
It is best to remove "enforce passwo... the remaining full text>

1st days Okay. On the first day, your SQL Server installation is either ready upt or has been tampered wit

SQLBOOT. DLL is lost.
You can only reinstall SQL Server.