SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Enabling Remote DAC


Enabling Remote DAC

Author
Message
Green Armchair
Green Armchair
Old Hand
Old Hand (345 reputation)Old Hand (345 reputation)Old Hand (345 reputation)Old Hand (345 reputation)Old Hand (345 reputation)Old Hand (345 reputation)Old Hand (345 reputation)Old Hand (345 reputation)

Group: General Forum Members
Points: 345 Visits: 452
Hi

Seen lots of stuff about how to enable remote DAC, but I can't find anything regarding the implications of enabling.

Are there any security or resource implications?

SQL Server 2005, Enterprise Edition.

Thanks



Perry Whittle
Perry Whittle
SSC-Insane
SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)SSC-Insane (20K reputation)

Group: General Forum Members
Points: 20084 Visits: 17244
The fact that it allows a remote connection to the server may raise eyebrows in some organisations. You do have to connect as a member of the sysadmin role so it's not completely wide open.

-----------------------------------------------------------------------------------------------------------

"Ya can't make an omelette without breaking just a few eggs" ;-)
Orlando Colamatteo
Orlando Colamatteo
SSCoach
SSCoach (15K reputation)SSCoach (15K reputation)SSCoach (15K reputation)SSCoach (15K reputation)SSCoach (15K reputation)SSCoach (15K reputation)SSCoach (15K reputation)SSCoach (15K reputation)

Group: General Forum Members
Points: 15015 Visits: 14396
Some scenarios where enabling remote DAC might be plausible:

- you are in a shop where the DBAs do not have Remote Desktop access to the server hosting SQL Server (rare in my experience, but the situation does exist)
- you do not install SSMS on the server and are not comfortable using sqlcmd.exe for troubleshooting so want to be able to connect to the DAC using SSMS from your own machine
- you are worried about a server being so busy that it cannot support a Remote Desktop session so you want to be able to connect to the DAC from anywhere

These restrictions on DAC still apply even when remote connections are enabled:

- you have to be in the sysadmin Fixed Server Role
- only one person can be connected to the DAC at a time regardless of whether it is a local or a remote connection

There are likely other scenarios you could come up with to help justify enabling remote connections to the DAC.

One reason not to enable remote DAC connections is that if someone connects and leave the connection open you could be out of luck when the server becomes otherwise unusable. You can kill the session using the DAC, but if you cannot initiate a session without using DAC in the first place that might be difficult. The same could be said of local DAC sessions if opened in a Remote Desktop session and that session were disconnected and left there indefinitely.

Personally I do not have a problem with allowing remote DAC connections but opinions may vary.

__________________________________________________________________________________________________
There are no special teachers of virtue, because virtue is taught by the whole community. --Plato
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search