If there are other DBs which are legitimately accessible by users, you can't.

If there aren't, and if you can authorization to modify your firewall policy on the server, then...

If they're in a Windows security group, you can add the group as a login and deny permission to connect to the SQL Server.

However, this is usually seen as a...

In this scenario you would want to look at setting up a separate database instance. You could even run on the same server.

Michael Meierruth (3/6/2013)

---

paul.knibbs (3/6/2013)

---

There's...

paul.knibbs (3/4/2013)

---

Wayne Evans-440401 (3/4/2013)

---

slightly off topic: For the likes of windows passwords back in the 2000/2003 server days, it looked to the lay person (me) that, only stored the first...

TravisDBA (3/4/2013)

---

Geoff A (3/4/2013)

---

TravisDBA (3/4/2013)

---

Geoff,

Please be Be very careful about suggesting or even implying that people should do this on productiohn SQL Servers. i work for the government and...

They are named the same, but they aren't the same. There is a role called db_datareader and there is a schema called db_datareader. This is a holdover from the SQL...

If it's sysadmin level, likely it doesn't own any objects as it would have mapped in as dbo to each database. What you can do:

- query sys.database_principals in each DB...

I have an article on here that talks about Kerberos authentication:

Configuring Kerberos Authentication[/url]

That's a good starting point to understand what is happening.

When the OS can't validate who you are, you are NT AUTHORITY\ANONYMOUS LOGON. You typically see this in double hop situations like when you have a client connecting to SSRS...

I've not personally used it as I prefer native solutions as well. However, the company has been around forever with the xp_crypt production. That might be more of a name...

Organizational Units:

Organizational Units (OU) are a structure wthin an Active Directory domain that allows for security delegation within Active Directory itself as well as segmenting GPO deployment. You don't need...

Remember that auditing firms make an attestation as to whether you're in compliance. That attestation is basically a statement of confidence. So, yes, it's entirely possible one firm would require...

Marie, you could certainly do that, but if the app uses the stored procedure, then the attacker can use it to do what the stored procedure is capable of. The...

David, I would agree with you that SQL injection attacks should be old news. The problem is they aren't. For instance, the discovery of serious SQL injection vulnerabilities for Ruby...