Home Forums SQL Server 2008 SQL Server Newbies Do Users based on logins in master have access to other databases? RE: Do Users based on logins in master have access to other databases?

  • clintonG (3/20/2013)


    Also, I wasn't talking about SQL permissions, you need to lock down the windows machine, limit administrative access, make sure that no one has permissions to the machine unless they need it

    Not going to be possible as the machines are shared and serve multiple uses. If I could encourage a separate machine I would.

    In that case, all your securing attempts with SQL Server are a waste of time. If someone has administrative access to the machine, they can get full control of the SQL database to the point of deleting all the data or dropping the database entirely and there's not a damn thing you can do in SQL to stop them.

    If you need to secure a database, the server it's on must be secured as well. If you haven't got the latter, you can't get the former either.

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass