rgranucc (3/2/2009)

---

we are getting the same results, but when I exec it as dbo I CAN see the results.

The problem exists for a user we created with datareader, and MSDynamicsSL....

SAS70, as you've probably realized, is extremely subjective and really dependent upon the caliber of folks from that certified accounting firm. Hard to argue meeting SAS70 as a reason.

Your better...

Why not encrypt at the ASP.NET application and store as VARBINARY(MAX)? That's a much simpler choice than trying to break up, separately encrypt, and store and then the reverse.

I know I'm coming in late on this, but the preference is not to use the local System account. It's not a minimal account (that's Local Service). It has all...

Mohit (3/5/2009)

---

SQL Server allows more then one admin connection; think about it in team of multiple DBA supporting large systems if only one admin connection was allowed / instance it...

My personal preference, and the recommended security best practice, is to use stored procedures. In that way ownership chaining can be used and direct access to the base tables is...

How did you deal with the untrusted situation? FTP?

Jason Shadonix (3/3/2009)

---

I've got a SQL server box outside our domain, and I need to be able to use xp_cmdshell on it to access a filesystem that is on our...

The operating system credentials of the user don't enter into...

There is a big difference between a regular server build, and a Small Business Server build. SBS is intended to provide an all-in-one solution for smaller than enterprise businesses. This...

That will bring up a domain, etc. SBS isn't exactly a small undertaking.

Vista is fine for individual development efforts, but you'll need a copy of Developer edition to be able to install. Since you're talking SQL Server 2008, your best bet would...

Aye, I'd agree with Steve on this one, check the registry on both nodes. I don't believe...

Greg Charles (3/2/2009)

---

nymgk_75 (3/2/2009)

---

So always use the db_login for asp.net code....not the actual db_user. Got it.

Ahhh, makes sense. Have a 1:1 relationship for a db_user and a db_login....

When you open up the database backup file after the decrypt, can you find readable text strings? You should be able to do so if it's fully decrypted. Also, what...