Re: How can I encrypt the MDF file

From: news@news.com
Date: 02/19/03 

From: <news@news.com>
Date: Tue, 18 Feb 2003 20:44:19 -0800

Encrypted files can only be decrypted (like copied to FAT partition) by the
nt account with which they were created, ergo, you'd need sysadmin to run
the xp_cmdshell or the service acct password to do it. Should be secure.

"Richard Siddaway" <rsiddaw@hotmail.com> wrote in message
news:26eb01c1f860$22c0e3e0$3bef2ecf@TKMSFTNGXA10...
> Even using EFS it would be possible to copy the mdf file
> onto a FAT32 partition thereby unencrypting and then
> attach to another instance of SQL server
>
> >-----Original Message-----
> >You could use EFS - we fully support it. You must log in
> as the SQL Server
> >service account and encrypt the database files using that
> account while SQL
> >Server is shut down. They would not be encrypted nor
> readable outside of
> >that service account.
> >
> >Ranjit
> >
> >
> >Disclaimer:
> >-----------
> >
> >This posting is provided "AS IS" with no warranties, and
> confers no rights.
> >
> >Are you secure? For information about the Strategic
> Technology Protection
> >Program and to order your FREE Security Tool Kit, please
> visit
> >http://www.microsoft.com/security.
> >
> >.
> >

Relevant Pages

  • Re: Securing an MDF file
    ... Windows 2000 support encrypted file system property. ... Below are the steps encrypt the data files: ... Logon with the SQL Server startup account ... database files are encrypted under the identity of the account ...
    (microsoft.public.sqlserver.server)
  • Re: securing mdf files
    ... You can use the Encrypted File System Support on Windows 2000. ... Below are the steps encrypt the data files: ... Logon with the SQL Server startup account ... database files are encrypted under the identity of the account ...
    (microsoft.public.sqlserver.security)
  • Re: MDF and LDF folder security
    ... Make sure all the file and disk shares on the SQL Server computer are ... "Windows 2000 introduced Encrypted File System that allows you to encrypt ... You must encrypt the files using the service account of SQL Server. ... > What permissions do the folders that hold the MDF and LDF files have to> have? ...
    (microsoft.public.sqlserver.security)
  • Re: Using EFS with SQL Databases
    ... Below are the steps encrypt the data files: ... Logon with the SQL Server startup account ... Right click the data files, select properties, click Advance button, ... database files are encrypted under the identity of the account ...
    (microsoft.public.sqlserver.security)
  • Re: No access to encrypted files after Password change
    ... Yea Howard, you are quite right, that would make EFS ... That is expected when the pwd is reset rather than ... >>Change requires that you be logged in as the account ... >>> Microsoft says that once you encrypt ...
    (microsoft.public.windowsxp.security_admin)