Re: securing mdf files

From: Hari Prasad (hari_prasad_k_at_hotmail.com)
Date: 06/22/05 

Date: Wed, 22 Jun 2005 20:40:06 +0530

Hi,

You can use the Encrypted File System Support on Windows 2000 .

Windows 2000 support encrypted file system property.

Below are the steps encrypt the data files:

1) Logon with the SQL Server startup account

2) Stop SQL Server and sql agent service

3) Right click the data files, select properties, click Advance button,
check the "Encrypt contents to secure data"

4) Start the SQL Server service

See the below KB for more information:-

HOW TO: Encrypt Data Using EFS in Windows 2000
http://support.microsoft.com/d­efault.aspx?scid=kb;en-us;2305­20
http://support.microsoft.com/default.aspx?scid=kb;en-us;230520

Note:

If you change the SQL Server startup accout you have to redo the same,
otherwise SQL Server service will not start.

"With EFS, database files are encrypted under the identity of the account
running SQL Server. Only this account can decrypt the files. If you need to
change the account that runs SQL Server, you should first decrypt the files
under the old account, then re-encrypt them under the new account." 

-- 
Thanks
Hari
SQL Server Mvp
"Ramez" <ramez@newsgroup.nospam> wrote in message 
news:%23HEiqgydFHA.1684@TK2MSFTNGP09.phx.gbl...
> Hi
> I plan to use an MSDE (or Sql Server Express) database in my single-user 
> application. My problem is that the mdf file will be accessible (at least 
> readonly) to anyone using the application. How can I be sure that the user 
> cann't copy the mdf file and attach it to another server and view all the 
> information he wants to?
>