SQL Server Security

SQL Database User

Hello, I have 3 servers running sql server 2005 server1, server2, and server3 with database1 and database2 respectively. I backup database1 on server1 and backup database2 on server2 then I restore database1 and database2 on server3 as read-only on a daily basis. I only want to use one sql...

Capture SQL Server logged in db User name in Access 2007 Accdb

I have a SQL Server 2005 backend with an Access 2007 Accdb front-end application.  Security has been established via SQL Server database user groups with associated table-level permissions. I would like to disable certain form functionality based on the logged in user.  Is there a way...

Changing the sql server service and agent windows account password

Hello, we are considering changing the sql server service and agent's password. What all should be considered prior to doing this? This will include doing this on 2000, 2005, and on clusters. Thanks!

Encrypt the password in SQL 2000

How to pass encrypted passwords in connection string in asp/vb using sql server 2000. Im trying to create a new user login for the applications using SQL server 2000. However want the end users to avoid viewing the login credentails for sql server 2000 in the connection string part. Hence prefer to...

Being notified when a delete operation is performed on SQL Server

How can I be notified of delete operations in SQL Server? Is there a tool out there (or something) that will notify me when a user performs a delete operation, without the user knowing about this activity?

SQL Server Security Login does not work after restoring database on another computer

I backup the production database on server named SQL1 then restored the database on server named SQL2. SQL server security login name "user1" has been created on both SQL1 and SQL2 servers. When I restore the database on SQL2 I have to re-map and give db_datareader access to the "user1" user name...

Prevent unauthorized users from accessing SQL Server 2000

One of the SQL Server 2000 databases that I administer is configured for Windows authentication. I added an integrated logon for the domain user group. However, 20 of those in the domain user group who should not have access to the server are still able to access it. How can I prevent these...

Free Chapter - Hardening a SQL Server implementation

Another free chapter download is available on the IT Bookworm Blog. Written by: Ross Mistry and Hilary Cotter Book: Microsoft SQL Server 2008 Management and Administration Overview: “If you need to deploy, manage, or secure Microsoft SQL Server 2008, this is the complete, fast-paced, task-based...

SQL Server Linked Server Security Context

Hey everyone, I'm working on some scripts that will run on a monitoring server and connect to several data servers to return information such as job status, etc. We also use linked servers for replication, etc. We use mixed authentication, however, I would like to change our linked servers to...

Deny domain administrators to select from sql server tables ( SQL server 2005)

I have added the "domain admin" group to the Sql Server, and set permission as "Deny" to connect to the database engine. All employees of this group can still select from any table. The sql server "public" role does not have any permissions on any database table. The "domain admin " group...

SQL Server password issues

How can I access a SQL Server without a password, how can I change a SQL Server password, and what is an SA on a SQL Server?

SQL Server security bulletin MS09-004

Has anyone dealt with issues related to this security bulletin ?

How do I avoid a security exposure using XP_SendMail

I'm using XP_Sendmail in a trigger on my database. In order to run the trigger, I have to give database access to the "guest" user. I'm concerned about security. I've tried a Stored Proc called SP_Sendmail that calls XP_Sendmail, but I still have to grant db access to the "guest". Any help here...

Creating a username and password on a SQL Server database

How we can create a username and password on my SQL Server database?

SQL Server 2005 or SQL Server 2008

I hav been trying to learn sql 2005 from lyk a month or two and i think i have done a good job. Now i was about to try some security stuff in it but i saw that sql 2008 is in market. Can any body suggest me that what is the difference between the two and can I swich to sql 2008? what ever i learned...

Password Policy for SQL Server 2000

Is there any way to set Password expiration Policies on SQL Standard Users in SQL 2000?

Securing a SQL Server 2008 database

I am on SQL Server 2000, and to secure my database, I want the user to be prompted for a user ID and password before the database is expanded. How might I do this?

securing sql server database object

I connect my access project to sql server. Is there as simple way to secure sql server object such as table, view, stored proc from editing or deletion since access let us to edit sql server object directly

Implementing row level security in SQL 2000

Is there a way to implement row level security in SQL Server 2000?

Don't run the SQL Server Account as Local Administrator or member of the Administrator Group?

Based on the advice "Don't run the SQL Server Account as Local Administrator or member of the Administrator Group" Will this setup prevented you from using critical features? How did you get around this? The link below makes reference as to how a critical feature "Automatic Server Restart...