SQL2000 database because of its own vulnerabilities, hackers can easily access the system administrator permissions.
SQL runs with system privileges by default, and permissions are super powerful.
In order to make the server more secure, it is recommended to set the SQL2000 to run with guests permissions, so that hackers even invade the database, can not obtain system administrator rights, to prevent further damage.
The specific settings are as follows:
1, to establish an account (this is assumed to be sqlservice), belong to the Guests group, pay attention to the cancellation of other permissions, only allow the Guests group, the following figure:
2, into the SQL Server Security directory, set the "SQLService" account has Full control of the permissions.
My local SQL is installed in: D:\Program Files\Microsoft SQL Server\, so the directory that needs to set permissions is: D:\Program Files\Microsoft SQL Server\mssql\
3, set up SQL installation directory has "SQLService" Read permission, my local is D disk.
4. Open SQL Enterprise Manager, right click on (local) (Windows NT), and then select Properties
5, select "Security" in the pop-up window, select "Start service Account"-"This account", fill in the newly-created SQLService and password, then click "OK" to save.
You will be prompted whether you need to reboot the SQL, select OK to reboot.
As the following illustration shows, the username is "SQLService" and the description is already set.