GSquared (12/2/2009)

---

A very common practice is to deny all rights in a database except the right to execute certain procs, then have those procs do all the DML actions. ...

Nope. That did NOT work. I even did a DENY INSERT on schema dbo and had the user's default schema as MySchema and had the proc saved in the schema...

Oh, now I haven't tested other schemas here. And in the database we'll be doing this in, the procs will be a different schema from the tables.

Thanks. I'll check that...

Okay, so you've tested the scripts using the Execute AS feature...

What does the script affect? Just tables in a database or does it access other things outside the database?...

I have when it's a permissions or ownership chain issue. Without seeing the script, I can't be for sure exactly what the issue is.

You say Query Analyzer. Do you...

sabyasm (11/23/2009)

---

[font="Comic Sans MS"]Can type of logging be configured through configuration file? For example - a flag in config file would enable or disable the SSIS log provider for text...

Go to SSIS on the menu, then Logging. After a moment, a popup window will appear.

Look at the Details tab, plus the Containers list to the left. This is how...

danjam (11/21/2009)

---

When you install SQL Server 2008, you have to specify the Widows accounts that you want to have initial administrator access. If you specify none, then you have no...

Irish Flyer (11/20/2009)

---

DoD only allows SQL Server authentication for those cases where it is mandatory, such as service accounts (the accounts under which you run the SQL Server Services). ...

Darren Wallace (11/20/2009)

---

I think you could effectively turn off Windows Authentication by explicitly denying BUILTIN\Everyone but I haven't tried it as I don't have a server handy that I want...

I won't...

BackupGuy (11/20/2009)

---

The responses so far are, typically, M$-centric...as if nothing exists outside of the AD domain where the SQL server resides that would ever require access to data in the...

Maybe I'm smoking something, but isn't SQL Server--and many things it now does--so tightly integrated into the OS that if Windows Authentication were removeable, it would break most of SQL...

Thanks, Garadin, for both the response and the test code. It's appreciated.

Microsoft has responded to that feedback thread with a request for more information. Were you the one who posted it?