Re: Secure a SQL-Server 2000 database.

From: Ingar Eide (ingar@eide.gs)
Date: 01/21/03 

From: ingar@eide.gs (Ingar Eide)
Date: 21 Jan 2003 11:42:36 -0800

"Vishal Gandhi" <GandhiV@mail.dnb.co.in> wrote in message news:<000601c2c107$e8b764a0$8df82ecf@TK2MSFTNGXA02>...
> Hi
> Can you use Application Roles , I believe Application
> Roles Should solve your problem.
>
> Best Regards
> Vishal

Yes, I thought that too, but maybe I'm missing somthing.

How can I remove all rights from all other logins that have admin
rights?
I have tried to apply an application role, but still I can use the
builtin\administrators to modify and see the db-structure and data.

Can I prevent other users that have admin-rights from using my db with
application roles?

(If I can't do that then my users just can attach my db to a
sql-server with an admin account and then see and modify my
structure/data, add adminaccounts and so on.)

-Ingar.

Relevant Pages

  • chmod doesnt work?
    ... The file is stored on a linux server. ... Someone knows how I can obtain the rights to modify it? ...
    (comp.lang.php)
  • Re: User rights.
    ... > all permissions and rights granted to any and all groups ... >From this I think I can infer that I am a member of both the administrator ... group as well as the user group and as such denying delete rights to the ... Keep in mind that modify includes delete. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Modify default replication wait period in ADAM
    ... This posting is provided "AS IS" with no warranties, and confers no rights ... > Use of included script samples are subject to the terms specified at ... >> I am trying to find out how to modify the default amount of time an ADAM ... > instance waits to push a directory change to a member of a replica set. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Win XP non-Admin problems
    ... Modify NTFS rights on Palm software directories (i.e. C:\program ... Give "Users" modify rights. ... You may also need to modify Palm registry keys. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Delegate certain rights to a single Domain Controller
    ... Please note that this hack does not eliminate all possible security risks, ... > This posting is provided "as is" with no warranties and confers no rights ... >> If you think your domain admins can only modify stuff in their own ... >>> cannot modify DCs across domains. ...
    (microsoft.public.windows.server.active_directory)