Re: Enterprise manager security?

From: Steve Thompson (SteveThompson_at_nomail.please)
Date: 03/04/04


Date: Thu, 4 Mar 2004 13:09:30 -0500


"rick m" <anonymous@discussions.microsoft.com> wrote in message
news:03A80E82-BAF0-4055-AEA7-9C33AEB30DB8@microsoft.com...
> Our product has the middleware conduct transactions with the SQL server
using a special account. The developers know the account and password in
order to code it in their apps. The problem is that they are not allowed
access to the platform once an app goes into production (we are in the
banking industry). However, they use Enterprise Manager and as long as they
know the account name and password, they can still get to any of the
databases.
>
> Anyone know how to stop a connection to a SQL DB (by user) with Enterprise
Manager?

No direct way, you'd be better off blocking (or simply removing any security
permissions) for user connections to the server running SQL Server. I agree
with the other posts, the main thing to emphasize -- use Windows
Authentication! That eliminates the need to hard code user names/passwords.
Security can be implemented and secured based on NT groups.

Steve



Relevant Pages

  • Re: SMS_MP_Control_Manager Errors
    ... A colleage of mine figure it out, it was "local security policy" problem, he ... IUSR_"Computer account" must be able to access the computer from the network. ... delete the Guests group from it. ... Verify that the SQL server is properly configured to ...
    (microsoft.public.sms.admin)
  • Http verification .sms_aut (port 80) failed
    ... I noticed I couldn't get SMS reports to work.... ... MP encountered an error when connecting to SQL Server. ... If using a standard SQL security account, ...
    (microsoft.public.sms.admin)
  • Re: Http verification .sms_aut (port 80) failed
    ... I resolved a problem like this changing the Security settings on SMS_MP ... I had to go into SQL Server Configuration Manager / SQL Server 2005 Network ... I noticed I couldn't get SMS reports to work.... ... If using a standard SQL security account, ...
    (microsoft.public.sms.admin)
  • Re: Switching to Advanced Security
    ... None of the patching tools have been implemented, ... that time with the option to switch to Advanced Security, ... siteservermachinename$ account in AD to the Systems Managment container ... local SQL Server security, in that the local computer account has ...
    (microsoft.public.sms.setup)
  • Re: SQL 2000 installation advice needed
    ... this option when installing SQL Server? ... > If you mean with that the local administrator account, ... > Security is not very important to me. ... >> Ghost backups of the operating system, and will backup the database daily. ...
    (microsoft.public.sqlserver.setup)

Quantcast