New developers anguish on Security

From: Paul (paul@themedialounge.com)
Date: 10/25/02 

From: "Paul" <paul@themedialounge.com>
Date: Fri, 25 Oct 2002 17:00:36 +0100

I have been asked to start development of an intranet using .NET and SQL
Server.
I have been told that the final solution will be installed on a dedicated
server.

In the meantime I have a PC on our network which will act as my development
server which has SQL Server installed on it.

Oh the joys of IT.

Before I start developing I have decided to do a bit of research into this
matter and in particular the security implications of it all.

The users need to be able to access the site from almost any location which
means (I Think) that any Winows security measures are thrown out of the
window.

Where should my research start?
Having a simple database driven login isnt good enough.
How can I secure my SQL Server Back-End?

I am not asking for answers......to big a subject but would appreciate any
usefull hyperlinks.

Thanks in Advance

Relevant Pages

  • Re: Access 2007->SQL Server2005 "connection was forcibly closed",G
    ... I moved every table I was able to move to the SQL ... closed connections - but all of these errors are in the version which used ... the SQL Server 2000 and everything worked ... communication between ODBC (OLEDB and Native Client, ...
    (microsoft.public.sqlserver.connect)
  • Re: Unable to Apply SP4 to SQL 2000 Cluster (new Node)
    ... Rebuild the node in the failover cluster. ... Scenario 1" in SQL Server 2000 Books Online. ... This setup process updates to SP4 only the binaries on the new ...
    (microsoft.public.sqlserver.clustering)
  • Re: WSS 3.0 question
    ... I followed the advise given in removing WSS 3.0 etc, ... the server is complaining that the SQL service(?) was tempered with or corrupt. ... I may just instal the SQL server as I was going eventuall use it anyway. ... If WSUS 3.0 is installed, I would suggest you uninstall it and then you install WSS 3.0. ...
    (microsoft.public.windows.server.sbs)
  • Re: WSUS
    ... I'm not seeing performance issues with the full enchilada installed, and 25 users busy hitting SQL. ... WSUS isn't difficult to uninstall - if you have WSUS v2 (installed with SBS R2) uninstall R2 from add/remove programs. ... How can anyone work with 4 instances of SQL Server on the same box? ...
    (microsoft.public.windows.server.sbs)
  • Re: SQL Resets
    ... If it were SQL that was falling short, ... The default backlog for SQL Server is 5. ... System.InvalidOperationException: Internal connection fatal error. ... From time to time, under heavy loads, we are getting resets at ...
    (microsoft.public.sqlserver.connect)