SQL 2005 security

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Carlos - 29 Jun 2007 18:16 GMT

Hi,
i've installed SQL Server 2005 Standard SP2 on a W.2003 Std. SP2, and I'm
worried about the security. Server authentication is "SQL SERVER mixed
mode", and windows firewall is on, but 1433 tcp port is open beacuse the
users needs to manage their databases remotely. Databases are created trough
a script that does:
-create the database
-create a user whith the procedure sp_addlogin
-DENY VIEW ANY DATABASE to this user
-DENY ALTER ANY LOGIN TO this user
-execute the procedure sp_changedbowner to this user and db created.

Are this steps right or should I do it in another manner? I want that a user
can accede only to his database.

Thanks!

Reply to this Message

mrdenny - 29 Jun 2007 20:32 GMT

It sounds like everything is setup correctly. Do you have a firewall infront
of the server?

The Windows firewall isn't the best in the world.

Signature

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration /
Microsoft Office SharePoint Server 2007: Configuration)
MCITP (dbadmin, dbdev)

> Hi,
> i've installed SQL Server 2005 Standard SP2 on a W.2003 Std. SP2, and I'm
[quoted text clipped - 12 lines]
>
> Thanks!

Reply to this Message