Re: How to protect a db from an sa user fetching its schema



Hi
http://vyaskn.tripod.com/sql_server_security_best_practices.htm --------security
best practices











"Magnus Österberg" <magnus.osterberg@xxxxxxxxxxx> wrote in message
news:epiDl5DSGHA.4740@xxxxxxxxxxxxxxxxxxxxxxx
On a customer-owned SQL Server 2000, we've got our db placed, together
with other software vendors databases. How can we protect from that the
customer and\or the other companies from fetching the db schema of our db?

All parties are allowd to login with the sa account. Can we by any means
configure our db such that only we can access the schema, and the sa can
not?

Must all parties (companies) be given individual logins? Then, what about
the sa account? Using this, one is still entitled to the schema of all
databses, right?

Any web page were I can read about this?

Magnus



.



Relevant Pages

  • Re: Trouble Extending Schema
    ... The SMS Server account has full control of the new system ... I've tried running the extend schema application from each of the domain ... Could you be more specific on how you are "manually" extending the AD ...
    (microsoft.public.sms.setup)
  • Re: ADAM Permission Questions (Hiding the Existence of Objects)
    ... Yeah he can try to ACL attribute definitions in the schema but who knows what that would break. ... will the inability of an account to see an attribute in the schema ... Is there a way to hide the existence of OUa and OUb from a specific account ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM Permission Questions (Hiding the Existence of Objects)
    ... Schema has Authenticated ... will the inability of an account to see an attribute in the ... Is there a way to hide the existence of OUa and OUb from a specific ...
    (microsoft.public.windows.server.active_directory)
  • Re: Child Domain
    ... users can log into OWA with the win.example.com account to access the ... The schemas of the two forests are completely separate. ... I wouldn't 'pound away' at the schema in win.example.com though as if you ... mailboxes in the same forest as the Exchange organisation. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Active Directory Schema
    ... "Herb Martin" wrote: ... account not all the fields are copied over to the new account. ... I have tried to edit the schema in Active Directory but with no luck; ...
    (microsoft.public.windows.server.active_directory)