Securing Databases From Porting

[AMK]

I have a situation where I have an app that uses a sql server (msde)
database. The app will be used in environments where no one should be
able to manipulate the data except the developers (app admins) - not
even site database admins. When the application and msde is installed,
a default instance of the database gets attached to msde or built by
script. by default, a built in server acct and approle acct exist to
secure the data accordingly with passwords concealed. What can be done
to keep someone from copying the mdf and ldf files to another machine
where they have admin rights and manipulating data?

Thanks.

[John Bell]

Hi

Stopping a really determined administrator getting access to this is
virtually impossible.

You may want to look at some of the encryption products
http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=30
the information on Encryptionizer says it will do this, but how it protects
it's keys I don't know.

John

"AMK" <ki*******@hotmail.com> wrote in message
news:11*********************@z14g2000cwz.googlegro ups.com...

I have a situation where I have an app that uses a sql server (msde)
database. The app will be used in environments where no one should be
able to manipulate the data except the developers (app admins) - not
even site database admins. When the application and msde is installed,
a default instance of the database gets attached to msde or built by
script. by default, a built in server acct and approle acct exist to
secure the data accordingly with passwords concealed. What can be done
to keep someone from copying the mdf and ldf files to another machine
where they have admin rights and manipulating data?

Thanks.