Windows Logon using Other Windows Account

From: Darion Mapp (godd@caribsurf.com)
Date: 12/04/02 

From: "Darion Mapp" <godd@caribsurf.com>
Date: Wed, 4 Dec 2002 11:08:22 -0400

We are currently planning the development of a series of applications that
will use SQL Server 2000. Our security concerns are:

1. Using windows login in VB,C#, whatever, will allow the user to login to
SQL server and do anything using any other Client connection utility, If I
give the windows users rights to delete. what is stopping them for going to
the database, bypassing the application, and removing the data themselves???

2. Using the SQL logins is not that too secure, a remote registry hack and I
have all the logins, so we want to disable that and use windows login only,
let AD and the admins worry about securing passwords.

How do I do this ???

Relevant Pages

  • Re: Database security design with ASP.net and form-based authentication
    ... This allows SQL Server to control security from both ... database security context to enable when a user belongs to multiple roles ... the single login approach is best in your situation since you don't ...
    (microsoft.public.sqlserver.security)
  • Re: Security Implementation???
    ... > MSDE, ... > In users node in the db node, only dbo with no login name exists. ... Make the security machine independent, ... running the SQL Server Agent (especially if you are running MSDE sp4 as ...
    (microsoft.public.sqlserver.security)
  • Re: application login , but user security
    ... SQL Server security context is determined by the login used to connect to ... SQL Server or an application role enabled after the connection is made. ... ES_MTO uses a single login, you won't be able to implement a SQL Server ... USERA logins in to the ES-MTO ...
    (microsoft.public.sqlserver.security)
  • Re: Single Sign on
    ... SQL Server does not store any password for windows ... However, the application need to do the login as a Windows login, as I mentioned this is an ... or a Windows login. ... > Tibor Karaszi, SQL Server MVP ...
    (microsoft.public.sqlserver.server)
  • Re: SQL Logins vs Windows Authentication
    ... Microsoft recommends using Windows Authentication for security purposes as you avoid using SQL Server Logins because then it would be easier to capture these login info and infiltrate into your SQL Server system. ...
    (microsoft.public.sqlserver.security)