469,088 Members | 1,268 Online
Bytes | Developer Community
New Post

Home Posts Topics Members FAQ

Post your question to a community of 469,088 developers. It's quick & easy.

SQL Security related

We had been running SQL Server without any control of security (since
the company is very small -100 employees). All of us know the admin
password and has been accessing the database as admin. Our database
server crashed due to hardware failure twice last month and we lost a
lot of important data. Now the management is taking the control of
server access seriously.

SQL Enterprise manager is installed on many PCs and any one can delete
any database with a right click.

My question is:

1. Can the enterprise manager be installed on client's PC with a
limited right (or as a user not as admin)?
We need to limit the user's access of using the Enterprise Manager.
In other words, how can we set this up for different users.
2. How can we keep running SQL Server if one server fails?
Clustering or Replication or Mirroring? O
I would highly appreciate if you could direct me to any website or
resources on how to set up security of SQL Server (2000 with the latest
service pack).
Thanks a million in advance.
Best regards,

Mamun

Aug 11 '05 #1
2 1067
Enterprise Manager runs with whatever permissions are assigned to the
login specified when you register the server in EM on each machine.

If everyone is logging in as SA then you should make everyone
re-register their servers in EM using different logins - either SQL
Server or Integrated (domain) logins. Then change the SA password. I
suggest you use Integrated security if you can. Assign users to domain
groups according to what level of access they need, then assign roles
to those groups.

For high availability options see:
http://www.microsoft.com/sql/techinf...ilability.mspx

--
David Portas
SQL Server MVP
--

Aug 11 '05 #2
microsoft.public.dotnet.languages.vb (ma******@hotmail.com) writes:
We had been running SQL Server without any control of security (since
the company is very small -100 employees). All of us know the admin
password and has been accessing the database as admin. Our database
server crashed due to hardware failure twice last month and we lost a
lot of important data.
Sounds as if you need to review your backup strategy.
2. How can we keep running SQL Server if one server fails?
Clustering or Replication or Mirroring? O


Clustering, log-shipping and replication are all possible to use for
high-availability solutions. Clustering is the most heavy-duty, but
also requires more money for hardware. And you need Enterprise Edition
of SQL Server.

Log shipping is leaner, but still requires Enterprise, if you want to do
it simple. (It's possible to do log shipping with Standard, but you need
to roll your own.)

Replication is definitely the low-budget solution. The main purpose of
replication is not to provide high availability, but it can be used for
this aim.

Some of the articles on
http://www.microsoft.com/technet/pro.../dbengine.mspx
may be useful to you.

--
Erland Sommarskog, SQL Server MVP, es****@sommarskog.se

Books Online for SQL Server SP3 at
http://www.microsoft.com/sql/techinf...2000/books.asp

Aug 11 '05 #3

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

28 posts views Thread by grahamd | last post: by
12 posts views Thread by A.M. | last post: by
2 posts views Thread by Matt Theule | last post: by
5 posts views Thread by Norsoft | last post: by
7 posts views Thread by Magdelin | last post: by
3 posts views Thread by Velvet | last post: by
1 post views Thread by CARIGAR | last post: by
reply views Thread by kglaser89 | last post: by
By using this site, you agree to our Privacy Policy and Terms of Use.