Re: Minimum permissions for Backup/Restore

Brian
What account ExpressMaint.exe runs under? BUILTIN\Administrators ?


"Brian" <a@xxxxx> wrote in message
news:e1Y38EM9IHA.4092@xxxxxxxxxxxxxxxxxxxxxxx
I'm fairly new to SQLServer security and I'm finding that once someone has
access to the physical file it seems to be very difficult to prevent them
from making updates.

I used to use Access and with that I was able to secure the database and
set the permissions to their user so even though the file can be copied
they could not inadvertantly update the rows. Of course backup/restore
was external to Access.

I am using SQLExpress on standalone laptops and I would like to prevent
users from accidentally modifying rows if they happen to view the tables
in management studio which they use to backup/restore and do some queries.

I thought of removing the permissions for BUILTIN\Administrators and
BUILTIN\Users and creating one sqllogin with dbdatareader permissions and
a special sqllogin Backupuser with dbcreator and dbbacupoperator
permissions and dbdenydatawriter but then I run into a problem when I try
to schedule backups using ExpressMaint.exe

Can someone point me in the right direction or is what I need to do not
possible?
Thanks
Brian



.

Relevant Pages

  • Minimum permissions for Backup/Restore
    ... access to the physical file it seems to be very difficult to prevent them ... the permissions to their user so even though the file can be copied they ... management studio which they use to backup/restore and do some queries. ... special sqllogin Backupuser with dbcreator and dbbacupoperator permissions ...
    (microsoft.public.sqlserver.security)
  • Re: Minimum permissions for Backup/Restore
    ... set the permissions to their user so even though the file can be copied ... users from accidentally modifying rows if they happen to view the tables ... in management studio which they use to backup/restore and do some ... and a special sqllogin Backupuser with dbcreator and dbbacupoperator ...
    (microsoft.public.sqlserver.security)
  • Re: Minimum permissions for Backup/Restore
    ... set the permissions to their user so even though the file can be copied ... users from accidentally modifying rows if they happen to view the tables ... in management studio which they use to backup/restore and do some ... a special sqllogin Backupuser with dbcreator and dbbacupoperator ...
    (microsoft.public.sqlserver.security)