--Prevent access from Excel
CREATE TRIGGER logon_trigger_not_from_excel
ON ALL SERVER FOR LOGON
AS
BEGIN
IF APP_NAME() LIKE '%excel%'
OR APP_NAME() LIKE '%Query Analyzer%'
 ROLLBACK
END


--Try to connect from Excel/whatever app...you'll get an error...not very descriptive, but an error preventing login.

--Prevent access from SSMS 
--drop TRIGGER logon_trigger_not_from_SSMS on all server
CREATE TRIGGER logon_trigger_not_from_SSMS 
ON ALL SERVER FOR LOGON
AS
  BEGIN
    IF APP_NAME() LIKE '%Microsoft SQL Server%'
      BEGIN
        IF suser_name() IN ('Stormdev\Lowell','sa') --the only persons allowed to use SSMS, no sa allowed for testing
          BEGIN
            --only allowed  from my host machine
            IF host_name() !='STORMDEV'
              BEGIN
                RAISERROR('SSMS connections are restricted on to specific dba machines.', 16, 1)
                ROLLBACK
              END --host name check
          END --suser_name check
        ELSE
          BEGIN
            RAISERROR('SSMS connections are not permitted with this logon.', 16, 1)
            ROLLBACK
          END
      END --app name check
    ELSE 
      BEGIN
        RAISERROR('SSMS connections are restricted on  this server.', 16, 1)
        ROLLBACK
      END 
  END --trigger