Re: sql express 2005 security


Ming,

You do not need to use a specific or predefined Windows username. You can
use any Windows user you want. You just need to give this user the required
permissions on the database.

Regarding your question about "If they can login, they can view the data",
only the user who has been given permissions to the database will be able to
see the data.

Of course somebody will need to consider who else has access to that
computer, as maybe, if they have the permissions on Windows (not SQL Server),
they can still copy the database files, read backup files, etc.

Hope this helps,

Ben Nevarez
Senior Database Administrator
AIG SunAmerica



"Ming" wrote:

Hi Ben,

I can't get your meaning...?!
Since my application will run on a standalone machine, I can't force user to
login using specific username.
If they can login, they can view the data, right?

Also, how could I distribute the application to client with a predefine
Windows a/c?
Cna you tell me more about them?

Thanks.


"Ben Nevarez" <BenNevarez@xxxxxxxxxxxxxxxxxxxxxxxxx> ¼¶¼g©ó¶l¥ó·s»D:02FE3BCB-EBA9-4F1E-ACBA-0C90031EA0D0@xxxxxxxxxxxxxxxx

Ming,

You can use Windows authentication instead, and connect using a Windows
domain or local account. You will not need to provide a username or
password.

Hope this helps,

Ben Nevarez
Senior Database Administrator
AIG SunAmerica



"Ming" wrote:

Hi All,

I'm going to implement a standalone solution to my company's partners,
which
is a VB.NET application with some $$ calculations.
Some rate data are sensitive and we choose to use sql server express 2005
as
local database engine.

My concern is that, how can I protect my id & password to access sql
express?
At least I need to code it inside VB.NET SQLConnection in order to access
the rate, and the code in VB.NET could be reversable, I afraid if someone
can hack into the code and discover the login credential.

Is there a way to prevent it?

Thanks.






.

Relevant Pages

  • Different Kerberos Principals from Windows Login
    ... When logging onto Windows XP against a Windows 2000 Server domain with a ... simple username of the form 'username', with the domain 'DOMAIN' selected in ... If they use a different login string, ...
    (microsoft.public.windows.server.security)
  • Different Kerberos Principals from Windows Login
    ... When logging onto Windows XP against a Windows 2000 Server domain with a ... simple username of the form 'username', with the domain 'DOMAIN' selected in ... If they use a different login string, ...
    (microsoft.public.windows.server.security)
  • Re: Logon problem
    ... Now I can't even get into windows. ... "Mark L. Ferguson" wrote: ... > me to enter a username and a password. ... I can still login even though> I ...
    (microsoft.public.windowsxp.help_and_support)
  • SourceForge.net Sitewide Update: Jan 26th, 2005 (fwd)
    ... I just returned from an enjoyable Open Source conference in Hawaii ... open sourced the database under the name Derby. ... The CVS client SF.net staff recommend for MS Windows users is ... priority technical support. ...
    (comp.os.linux.announce)
  • Re: How to get the username, without login prompt?
    ... >> Now I am trying to eliminate the login window entirely. ... >> request, the client (firefox, ie, etc) sends the clients hostname, IP, ... >> How do you pass the username to the server without the login prompt??? ... Oh and by are client machines running Windows or Linux. ...
    (comp.lang.php)