up vote 1 down vote favorite
share [g+] share [fb]

I want to stop some of our developers from connecting to the production sql server using a specific sql account. They have rights to connect through windows authentication with lower rights. They claim that changing the password will affect too many other processes running on our processing machine. So I want to deny access if they're connecting from there dev machines for now.

Another way this would work is if I could just allow connections from one specific host.

link|improve this question
feedback

2 Answers

up vote 3 down vote accepted

You need to create a log on trigger that checks the ip/host before allowing connections

http://bluedog67.com/blog/post/SQL-Server-Logon-Trigger-Restricting-Access-By-IP-To-Your-SQL-Server-Instance.aspx

link|improve this answer
feedback
up vote -1 down vote

As an alternative to using a logon trigger you could look at using the firewall to allow or deny access from specific IP's/networks. If you're using windows server 2008 the host firewall is very capable of this.

link|improve this answer
He wants to limit a specific login, not the whole machine. An IP based firewall won't accomplish this... – Scott Lundberg May 26 '10 at 18:57
How about last part of Q. Allow connections from one specific host. Obviously it's all or none in terms of login name – Nick Kavadias May 26 '10 at 23:51
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.