Re: ISV Using SQL Authentication - a login concern

From: Jasper Smith (jasper_smith9_at_hotmail.com)
Date: 05/26/04 

Date: Wed, 26 May 2004 17:41:35 +0100

To add to Geoff's excellent points, why does your application need sysadmin
priviliges ? You really need to try and use a login with minimal priviliges
and just the required rights in the database(s) it uses. Have a look at
http://www.microsoft.com/sql/techinfo/administration/2000/security/default.asp 

-- 
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"dev" <anonymous@discussions.microsoft.com> wrote in message
news:BEEEFD7D-7EA8-4858-812E-E61C46C8C9A6@microsoft.com...
> thanks Geoff, I appreciate your reply.  You said it is not very secure..
do you mean from external attacks or internal user issues.. what kind of
general problems I can expect to encounter.
>
> Thanks

Relevant Pages

  • Re: SQL Login
    ... The sa login account is a member of that role as well. ... Dejan Sarka, SQL Server MVP ... > But how do we add the User X to the sysadmin / ...
    (microsoft.public.sqlserver.security)
  • Re: SQL 2005 Express setup
    ... Because SQL Server would create a Login for Local Administrators and add this Login to the System Administrator "sysadmin" role. ... However, if you want your Login to be a System Administrator, then you should log in to your SQL Server Instance as a System Administrator and add your own Login to the sysadmin Fixed Server Role. ...
    (microsoft.public.sqlserver.setup)
  • Re: SQL 2005 Express setup
    ... Connect to your SQL Server Instance, ... Double click on the Login that you want to add to the "sysadmin" server ... Mark the "sysadmin" checkbox to make this Login a member of this Server ...
    (microsoft.public.sqlserver.setup)
  • Re: MSDE password change for "sa"
    ... I login to the machine as a local admin and connect via the ... As a sysadmin, you can execute the following to ... >> Upgrading to SQL Server isn't too bad. ... You will be asked if you want to upgrade ...
    (microsoft.public.sqlserver.server)
  • Re: Visual Studio gives direct dbo access to Sql Server 2000 ??? <<Update>>
    ... If you check out the logins in SQL Server, ... This login is a part of the sysadmin server role. ... If the developers need local admin rights, you can remove the BuiltIn\Administrators from the sysadmin role. ...
    (microsoft.public.sqlserver.security)