Microsoft advises that this problem can pose a potential security issue.
To determine whether this applies to your system, try to log on to MSDE by using the OSQL utility from a command prompt. Use the following syntax:
C:\>osql -U sa -P
If you receive the following message
Login failed for user 'sa'
the sa password is not blank, which indicates that the issue does not exist on your system.
However, if you receive the following message after you run the command
"1>"
the security vulnerability applies to the system, and you must follow the steps in the next section to change the 'sa' password.
How to Secure the 'sa' Account with a Password
You can use the sp_password stored procedure to set up a password for the 'sa' account. For example, to change the 'sa' password from NULL to "Test!01", use code similar to the following:
EXEC sp_password NULL,'Test!01','sa'
To set a secure password on Microsoft Data Engine (MSDE) 'sa' account, follow these steps:
- At the command prompt, log on to MSDE as follows:
C:\>osql -U sa -P
- When you receive the "1>" message, change the 'sa' account password by using the following command:
EXEC sp_password NULL,'Test!01','sa'
Note In this command, 'Test!01' is a secure password that meets your organization's security guidelines and that you can remember.
Note The password for 'sa' account must be strong. For password advice, visit the following Microsoft Web site: