Here is the question of the week. I am sure that you have seen guest user account in your databases. This week question is based on it;
What is Guest User Account and usage of it?
The Guest User Account is a system user account that is available with all user defined databases and it cannot be dropped. By default, it is disabled, it can be enabled using following code.
GRANT CONNECT TO guest;
This user account has no relevant Login Account. SQL Server uses this account when;
- User connects with SQL Server using the Login and tries to access a database that he has no User account created.
- Guest User Account is enabled.
In a way, this is good because this allows users to connect with SQL Server using Logins and accesses databases without creating Users but it might introduce some security threats as well. Therefore, it is better to keep it disabled. If you need to enable it, make sure it has least privileges on resources in the database.
No comments:
Post a Comment