Could you post some sample code for the resolution so that people who need this in the future can better understand your solution?

In my experience, the Compliance team (or whatever name the watchdogs have) are not tech people. If a DBA wanted to get away with something, it would be easy to...

laurav (12/3/2009)

---

I would tell my managers and IT security folks what I was doing and why, and they would look at me as though I had two heads. I...

Sorry about that. This is the same link Steve...

Seth,

Hate to break the news to you, but if they haven't already figured that trick out, they're either new to being T-SQL writer or they're not a very good one.

That's...

Actually, we don't allow anybody to write procs in production. We have a Dev environment, Test environment and QC environment to go through before things reach Production. Unfortunately, we're all...

GSquared (12/2/2009)

---

A very common practice is to deny all rights in a database except the right to execute certain procs, then have those procs do all the DML actions. ...

Nope. That did NOT work. I even did a DENY INSERT on schema dbo and had the user's default schema as MySchema and had the proc saved in the schema...

Oh, now I haven't tested other schemas here. And in the database we'll be doing this in, the procs will be a different schema from the tables.

Thanks. I'll check that...

Okay, so you've tested the scripts using the Execute AS feature...

What does the script affect? Just tables in a database or does it access other things outside the database?...

I have when it's a permissions or ownership chain issue. Without seeing the script, I can't be for sure exactly what the issue is.

You say Query Analyzer. Do you...

sabyasm (11/23/2009)

---

[font="Comic Sans MS"]Can type of logging be configured through configuration file? For example - a flag in config file would enable or disable the SSIS log provider for text...

Go to SSIS on the menu, then Logging. After a moment, a popup window will appear.

Look at the Details tab, plus the Containers list to the left. This is how...

danjam (11/21/2009)

---

When you install SQL Server 2008, you have to specify the Widows accounts that you want to have initial administrator access. If you specify none, then you have no...

Irish Flyer (11/20/2009)

---

DoD only allows SQL Server authentication for those cases where it is mandatory, such as service accounts (the accounts under which you run the SQL Server Services). ...