October 8, 2009 at 8:11 pm
Hi every body, I had a security issuse and wish for a help.
I bought software for customer and this software require local database.
So, i set up database in new PC and gave to customer.
The question is "How can i prevent customer from accessing database in new PC which i gave them, except from my software?".
October 9, 2009 at 2:13 am
namnl (10/8/2009)
Hi every body, I had a security issuse and wish for a help.I bought software for customer and this software require local database.
So, i set up database in new PC and gave to customer.
The question is "How can i prevent customer from accessing database in new PC which i gave them, except from my software?".
you say local database, what version of sql server did you install, and how does your software access the database.
--------------------------------------------------------------------------------------
[highlight]Recommended Articles on How to help us help you and[/highlight]
[highlight]solve commonly asked questions[/highlight]
Forum Etiquette: How to post data/code on a forum to get the best help by Jeff Moden[/url]
Managing Transaction Logs by Gail Shaw[/url]
How to post Performance problems by Gail Shaw[/url]
Help, my database is corrupt. Now what? by Gail Shaw[/url]
October 9, 2009 at 2:31 am
I used SQL server 2005, my software logged in database by special user.
October 9, 2009 at 2:56 am
namnl (10/9/2009)
I used SQL server 2005, my software logged in database by special user.
Special user?, I am assuming you mean a sql login, what is the OS of the machine that the database was installed on, and did you do a default installation, and have you locked down the server for security purposes or done anything to restrict access.
--------------------------------------------------------------------------------------
[highlight]Recommended Articles on How to help us help you and[/highlight]
[highlight]solve commonly asked questions[/highlight]
Forum Etiquette: How to post data/code on a forum to get the best help by Jeff Moden[/url]
Managing Transaction Logs by Gail Shaw[/url]
How to post Performance problems by Gail Shaw[/url]
Help, my database is corrupt. Now what? by Gail Shaw[/url]
October 9, 2009 at 3:02 am
Silverfox (10/9/2009)
namnl (10/9/2009)
I used SQL server 2005, my software logged in database by special user.Special user?, I am assuming you mean a sql login, what is the OS of the machine that the database was installed on, and did you do a default installation, and have you locked down the server for security purposes or done anything to restrict access.
Yes, i used sql login. The OS is XP SP3, i made a default installation for sql server 2005. I am wondering how can i restrict access from customer? So can you help me?
October 9, 2009 at 8:04 am
If you look at the Security of SQL Server, you will probably see BUILDIN/Administrators as one of the sysadmins. There are couple of things you should do.
Run the SQL Service and agent under a domain user. (Change the service user settings using SQL Configuration tool and not windows services), then add your windows user name as a login and make that user sysadmin. Change the SA password and then chamge the BUILDIN/Adminstrator from sysadmin to just a public role.
That should do the trick. But before you do that on your clients PC, test it out by yourself in another machine and see if it worked.
-Roy
October 9, 2009 at 7:40 pm
Roy Ernest (10/9/2009)
If you look at the Security of SQL Server, you will probably see BUILDIN/Administrators as one of the sysadmins. There are couple of things you should do.Run the SQL Service and agent under a domain user. (Change the service user settings using SQL Configuration tool and not windows services), then add your windows user name as a login and make that user sysadmin. Change the SA password and then chamge the BUILDIN/Adminstrator from sysadmin to just a public role.
That should do the trick. But before you do that on your clients PC, test it out by yourself in another machine and see if it worked.
Thanks for your help but i can not use domain user because customer can use my software by any computer, either it in workgroup or not. So i tried to lock down my PC, and encript app config.
The security seems strong now, customer can not do anything with database now.
But what happen when customer get hard disk out and put in orther PC? They can access my database in that PC?
Viewing 7 posts - 1 through 7 (of 7 total)
You must be logged in to reply to this topic. Login to reply