Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Hi I would like to block access to insert any data on SQL when a User from a determined Active Directory Group access SQL from MS ACCESS.

Is this possible? if not is there any alternative?

I've tried a server trigger, and was able to prevent access to sql from someone by its IP, and the program name. But I would like to prevent inserts, is there a way to do this?

thanks, Gabriel

share|improve this question
ONLY from within Access? Does that group need to be able to INSERT from other places? – squillman Mar 25 '11 at 14:51
Hmmm probably they have access through win applications but they can be filtered, but yes the app has to be filtered. (I know access is impossible as the application name is office, so office is ok) – Gabriel Guimarães Mar 25 '11 at 14:55
up vote 1 down vote accepted

You can block for an AD user or group. But not reliably by client used.

Note: Permissions are for principals, not for code generally.

The client name can determined by sys.sysprocesses.program_name.


This is set by Application Name in the connection string, so it can be any value. And you can't set it in MS Access (upto version 2003 at least): it shows as "Microsoft Office 2003" same as, say, Excel (you can set it from Excel oddly).

So, no, you can't do it.

share|improve this answer
so I can only block from a certain AD group ... thanks – Gabriel Guimarães Mar 25 '11 at 23:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.