Setting up and securing SQL Express in a (potentially) hostile environment



My company is sort of a hybrid between an ISV and ASP; we write client
applications that get installed on the end-user's machines and we write
server application's that provide data to, and interact with, the client
applications. Our client applications are very data centric and so in our
next release I want to install SQL Express as a component of our client
apps. Once installed, I hope to use merge replication to manage data
transfers between the client app and our datacenter. The only (potential)
problem is that the client apps our written for a mix of in-house and
customer use, and as such, we will not have administrative rights on the
customers' client machines.

Does anyone know how, or even if it is possible or advisable, to install SQL
Express in such a way that I can prevent administrative access to the
database, or more to the point, ensure that security system I setup inside
the database is honored an not bypassed by sysadmin or securityadmin?

Thanks,
Wells


.



Relevant Pages

  • Re: sms deployment basic questions
    ... started on all the machines but only one showed up under the "all systems" ... I haven't tried to install ... > In your discovery methods, ... >> client it was telling me it couldn't access some container, ...
    (microsoft.public.sms.admin)
  • RE: Automatically install programs
    ... I understand that you want to know how to install some applications on ... You must install a copy of Veritas ... To add the program for deployment to client computers ... In the console tree, double-click Client Computers, and then in the ...
    (microsoft.public.windows.server.sbs)
  • Problem installing advanced client - ccmsetup service stays active.
    ... I am having a problem with 1 PCinstalling the advanced client. ... -Pushed client install from console but install ... SMS Advanced Client is not installed. ...
    (microsoft.public.sms.setup)
  • RE: Fax monitor incoming + outgoing calls?
    ... The detail steps to install share fax client as follows: ... Start server management console, locate Client Computers node, click ... To the folder redirection GPO issue: ... How to stop Folder Redirection in Windows Server 2003 and in Windows 2000 ...
    (microsoft.public.windows.server.sbs)
  • Re: wuauclt/srvchost at 100% today
    ... It may say "Install is not needed since Windows Update Agent is ... Manager, WSUS, Microsoft, WSUS 3.0 was released on April 30th and is ... Install the Windows Update Agent for all the client computers ... machines will still be responsive when WU client scans for updates. ...
    (microsoft.public.windowsupdate)