RE: SQL Server Security

From: DBADave (DBADave_at_discussions.microsoft.com)
Date: 01/27/05 

Date: Wed, 26 Jan 2005 17:55:02 -0800

A couple of resources you may want to check include:

SQL Server 2000 Security & Best Practices:
http://www.microsoft.com/technet/prodtechnol/sql/2000/maintain/sp3sec00.mspx

SQLSecurity.com: http://www.sqlsecurity.com/DesktopDefault.aspx

Sample lockdown scripts that can be used to secure your SQL server:
http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=25

"Shaqman" wrote:

> New to SQL Server. I need to setup security where our network admin is
> different from SQL admin (DBA). Is there any recommendations as to how this
> needs to be setup (white paper or online publications). Basically my goal is
> to
>
> 1. have a "locked" down sql server where only the SA account should manage
> the services
> 2. Network administrators should not be able to use another EM to browse any
> data services
> 3. SQL server and agent should start with the local account
>
> I am running Win2003 server with SQL Enterprise. Any help will be
> appreciated
>
>
>

Relevant Pages

  • SQL Server Security
    ... New to SQL Server. ... I need to setup security where our network admin is ...
    (microsoft.public.sqlserver.security)
  • Secure access to a SQL Server database
    ... securely accessing SQL Server. ... script text, computer launched from, user launching. ... the hash value that gets authenticated against the secure table. ... ASP Currently we use SQL Server authentication and stuff something in a ...
    (microsoft.public.sqlserver.security)
  • Re: Best method of saving data between the normal and SSL stuff
    ... I would use a central SQL Server to host both secure and non-secure data. ... > What I want to do is store their completed orders so that they can look at ... > to same http 'hit' DB? ...
    (microsoft.public.inetserver.asp.db)
  • Re: How to prevent my stored procedure code from being decrypted?
    ... > How should I do to secure my code? ... the primary way to protect intellectual property is with license ... this alias are considered for inclusion in future versions of SQL Server. ... > I found some freewares which can decrypt the encrypted stored procedure. ...
    (microsoft.public.sqlserver.security)
  • Re: [Full-disclosure] Database servers on XP and the curious flaw
    ... that by default it's secure. ... received at least 3 emails that have pointed this out that SQL server is ... running database servers on their system. ... >>well if the configuration allows the guest account access to the database. ...
    (Full-Disclosure)