1
vote
2answers
385 views

Distributing SQL Server on Internet regarding security issue

We are going to put our servers in two places to keep high level redundancy and to avoid bandwidth critics. The two servers are on different LANs but communicate over a WAN network (via Internet). One ...
1
vote
1answer
159 views

Can I set MSSQL permissions for individual users with a group login?

I have a lot of SQL 2005 servers with a lot of databases and a lot of Windows users that need access to all the servers but only a few databases, and that last part changes regularly. Managing these ...
1
vote
1answer
90 views

Does MS SQL 2005 encryption protect data in the case of physical server access?

I am looking into MS SQL 2005 encryption (not 2008, so TDE is out), and I believe I understand the concept of how a column is encrypted. The OS uses the service credentials to encrypt the service ...
0
votes
2answers
105 views

Securing MSSQL between two servers

I know MSSQL can have various login modes, windows only, windows + sql, etc. named pipes, tcp/ip. Really I'm not sure what we should use. We have two servers each with IIS + MSSQL, network load ...
1
vote
0answers
120 views

Can encryption be disabled for the login handshake in SQL Server 2005 or 2008

When a client Application connects to SQL Server the login credentials are sent over the network in a TLS Encrypted Handshake Message. For testing purposes I would like to have the login credentials ...
1
vote
1answer
991 views

SQL Server 2005 Accidentally removed a user from public role, can't add user back into role

I'm trying to crearte a DB user account that only has access to a specific database, and can't read or change other databases, and can't alter credentials for any other accounts. I accidentally ...
0
votes
3answers
2k views

How do I disable Windows authentication on a SQL Server instance?

How do I disable Windows authentication on a SQL Server instance?
1
vote
1answer
595 views

SQL Server: how to check securables

I would like to make a t-sql query to check which logins have 'view server state' permission in server type securables. How to achieve this? This query from mssqltips don't show this: ...
4
votes
1answer
183 views

SQL 2005 Security - Users: What are they used for? (and other various questions)

I am not a DBA and so dont really know anything about SQL 2005 security settings, etc. I am attempting to set up an empty copy of our database by generating the full database from SQL Management ...
7
votes
2answers
1k views

What are the implications of the SHOWPLAN permission on SQL Server 2005?

A user wants the SHOWPLAN permission in order to use Execution Plans to tune a query. What are the implications of this permission. Is it safe to grant a user? I've seen the security note here, and ...
2
votes
1answer
249 views

SQL Server 2005 windows group permissions overriding individual server logins

Hi, I was wondering if someone knows a way round this. I have a database which needs to be accessed by a Windows Group with read only access. Some individuals in this group need write access. I ...
1
vote
2answers
468 views

Cannot generate SSPI context

I'm trying to connect between two SQL Servers to set up log-shipping. I'm getting the following error when connecting from the Publisher to the Subscriber: Cannot connect to DRBOX Additional ...
1
vote
1answer
376 views

Give developers read-only access to schema

We have a staging server where we do final acceptance testing before we go live. It's a copy of Live where devs have no more privileges than regular users. I'm trying to give the devs read-only ...
1
vote
1answer
1k views

Security implications of granting ALTER TRACE

Are there any server-level security concerns I might be missing with granting a login ALTER TRACE on a SQL 2005 instance? I don't care that the login can see anything that's happening on the server ...
0
votes
2answers
570 views

Need a secure way of granting access to xp_cmdshell

Imagine the following scenario: I need to execute a stored procedure which, amongst other things, needs to EXECUTE xp_cmdshell to run a command-line script which executes a bulk insert (bcp) command ...
2
votes
4answers
5k views

SQL Server Maintenance Plan failing - Failed to acquire connection “Local server connection”

I've got a recently installed sql 2005 database server (an upgrade from 2000 on the same machine), I'm trying to get maintenance plans set up to reindex etc but they are constantly failing. This is ...
0
votes
1answer
414 views

Safely Grant Access to SQL 2005 Replication Monitor to Create Snapshots

0 vote down star I have a database that I'm publishing to a remote site using Snapshot replication (only method that will work given the application and database schema). Because the replica ...
1
vote
2answers
573 views

default PUBLIC settings

does anyone know of any security risks with the default PUBLIC settings for sql 2005/8? i ran sp_helprotect and it listed out the PUBLIC grants, and now i have an auditor telling me that i have a ...
0
votes
3answers
4k views

DBO role in SQL Server 2005 versus DBA role?

What is the difference between DBO role versus the DBA role?
2
votes
2answers
220 views

Login fails when using SQL Mirroring

I have a peculiar scenario where my mirrored database can't be accessed on one server but it can on the other. I've tried specifying a specific SQL login to get it working but when the database is ...
0
votes
3answers
887 views

Using a Security Group to Manage MS SQL 2005

I want to add an AD security group to my MS SQL 2005, which will contain the personal allowed to fully manage all aspects of the server. I have created the group (DOMAIN\SQL Admins) and added it to ...
3
votes
4answers
247 views

What is considered more secure for sql server security

When setting up security on SQL Server 2005 / 2008. What is the more secure option? Windows Authentication Mode Only Mixed Authentication Does it matter if the server will be accessed by many ...