up vote 2 down vote favorite
1
share [g+] share [fb]

We juste had a security audit that found that, if you get access to our database (SQLInjection for example), you can easily send all the content of the database to a remote SQL Server.

The recommendation is to disable Ad Hoc Distributed Queries. I found a lot of articles on how to do that on SQL Server 2005, but not on SQL Server 2000.

Any idea ?

link|improve this question
feedback

1 Answer

up vote 5 down vote accepted

According to this Distributed Query Architecture page: "For each instance of SQL Server 2000, members of the sysadmin fixed server role can enable or disable the use of ad-hoc connector names for an OLE DB provider using the SQL Server DisallowAdhocAccess property."

link|improve this answer
He he, you were faster! +1 – splattne♦ May 19 '09 at 16:20
Hey, thanks for the super-fast and correct answer ! – Sébastien Nussbaumer May 19 '09 at 16:34
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.