Integrated Security and unauthorzed apps.

From: D Barry (google_at_dcbarry.com)
Date: 07/23/04 

Date: 22 Jul 2004 15:43:08 -0700

Greetings:

If SQL 2000 is configured only to accept Windows authentication, how
do I prevent end-users from connecting to SQL with unauthorized
applications (such as Enterprise Manager)?

I know it's possible to check (although a clever programmer can easily
fool) the calling application name, but to do so within every stored
proc would be onerous.

This has been a head scratcher in our effort to shut off SQL
authentication and removing stored credentials, so all help is
appreciated.

Thanks much

d.

Relevant Pages

  • Re: Q: Named pipes and Windows (integrated) authentication
    ... >By the way, if you don't have SQL Enterprise Manager, there's an MSDE ... >>>his windows authentication to connect to the server. ... >>>Creating databases is only acomplished after you've already connected. ...
    (microsoft.public.sqlserver.connect)
  • RE: MELL and SQL
    ... At this point I'm logged in as admin and since ... have the necessary permissions for the installation. ... > Most third party apps don't use Windows Authentication, they use SQL ...
    (microsoft.public.windows.server.sbs)
  • Re: SQL Server Authentication
    ... I'm sorry to hear you are having some troubles with SQL authentication. ... can I would love to persuade you to use Windows authentication if at all ... > With VSTO using Visual Studio 2005, has anyone manage to use SQL Server ...
    (microsoft.public.vsnet.vstools.office)
  • Re: SQL Server uses Windows authentication
    ... > With Windows Authentication you do not put any credentials in the ... The connection uses the credentials of whatever ... >> 1 remote web server to connect to an SQL db on a completely different ...
    (microsoft.public.inetserver.asp.db)
  • Re: Login failed for ServerGuest
    ... SQL Server clients are authenticated as guests if Simple ... >| I have noticed that when I try to log in using Windows Authentication ... >|> You can enable the guest account but that's a security risk ...
    (microsoft.public.sqlserver.connect)