You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: Learn about the benefits and requirements of the Extended Protection for Authentication for the SQL Server Database Engine. See how to enable and configure it.
4
4
author: markingmyname
5
5
ms.author: maghan
6
-
ms.date: 01/22/2021
6
+
ms.date: 08/08/2023
7
7
ms.service: sql
8
8
ms.subservice: tools-other
9
9
ms.topic: conceptual
10
10
monikerRange: ">=sql-server-2016"
11
11
---
12
+
12
13
# Protocols for MSSQLSERVER Properties (Advanced Tab)
13
14
14
15
[!INCLUDE [SQL Server Windows Only](../../includes/applies-to-version/sql-windows-only.md)]
@@ -17,18 +18,17 @@ Use the **Advanced** tab on the **Protocols for MSSQLSERVER Properties** dialog
17
18
18
19
> [!IMPORTANT]
19
20
> Windows does not enable **Extended Protection** by default. For information about how to enable **Extended Protection**, see the following:
> -[Extended Protection for Authentication Overview](/dotnet/framework/wcf/feature-details/extended-protection-for-authentication-overview)
22
24
23
25
For more information about how to configure other [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] services, see [Manage the Database Engine Services](../../database-engine/configure-windows/manage-the-database-engine-services.md). For a complete description of Extended Protection, see [Connect to the Database Engine Using Extended Protection](../../database-engine/configure-windows/connect-to-the-database-engine-using-extended-protection.md).
24
26
25
-
**Extended Protection** is fully supported by the [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] Native Client beginning with [!INCLUDE[sql2008r2](../../includes/sql2008r2-md.md)]. Support for **Extended Protection** for other [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] client providers is not currently supported.
26
-
27
27
## Options
28
28
29
29
### Extended Protection
30
30
31
-
There are three possible values:
31
+
There are three possible values:
32
32
33
33
-**Off**: Means **Extended Protection** is disabled. The instance of [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] will accept connections from any client regardless of whether the client is protected or not. **Off** is compatible with older and unpatched operating systems, but is less secure. Only use this setting when you know that the client operating systems do not support extended protection.
34
34
@@ -40,6 +40,6 @@ There are three possible values:
40
40
41
41
An instance of [!INCLUDE[ssNoVersion](../../includes/ssnoversion-md.md)] can be identified by more than one NTLM service principal name (SPN). You list the SPNs as a series of strings separated by semicolons. For example, the value **MSSQLSvc/HostName1.Contoso.com;MSSQLSvc/HostName2.Contoso.com**, indicates that clients attempting to connect to SPNs named **MSSQLSvc/HOST1.Contoso.com** or **MSSQLSvc/HOST2.Contoso.com** are allowed. The variable has a maximum length of 2048 characters.
42
42
43
-
## See Also
43
+
## See also
44
44
45
45
[Extended Protection for Authentication with Reporting Services](../../reporting-services/security/extended-protection-for-authentication-with-reporting-services.md)
0 commit comments