Home > Fast Guide: Controlling access to SQL Server
Fast Guide:
EMAIL THIS LICENSING & REPRINTS

Fast Guide: Controlling access to SQL Server

14 Nov 2005 | SearchSQLServer.com

Expert advice on database administration
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google

One of your top priorities as a DBA (maybe the top priority) is to secure your SQL Servers, the home to your customer details, human resources data and all business-critical information. You must not only protect SQL Server against external threats, but the much-more-common internal threats -- and the measures you take to control access will go a long way in achieving that. This guide will walk you through key tips and expert advice to help you control internal and external access to SQL Server, and it will highlight access control enhancements in SQL Server 2005.

TABLE OF CONTENTS
  Controlling internal access
  Controlling external access
  SQL Server 2005 access control
  Additional security resources

  Controlling internal access Return to Table of Contents

  • Hiding SQL Server
    If you're running SQL Server in an environment where you don't want computers to access it, you must hide the instance from network discovery.

  • Access SQL Server securely using Windows domain accounts
    Windows domain accounts offer the most secure access to SQL Server. Find out why and how to use Windows authentication to defend against hackers.

  • Change privilege levels for SQL Server 2000 services
    SQL Server 2000 users can access OS features in accounts where the server process runs, which makes the database vulnerable to attackers unless you change the privileges.

  • Which user is logged into which database
    Get help tracking (in SQL Server itself) which SQL Server users are currently logged in and which database(s) they are accessing.

      Controlling external access Return to Table of Contents

  • Hacker's-eye view of SQL Server
    Hackers can devastate your SQL Server workflow and cripple your company's business. Learn the four primary methods used to hack into SQL Server.

  • Use SQLPing to prevent outside access
    Make sure no listening ports are open for public access on your SQL Server machines -- or you could be relaying sensitive database information to the outside world.

  • Securely sharing access to SQL Server
    Get a secure way to share access to a physical SQL Server running multiple databases.

      SQL Server 2005 access control Return to Table of Contents

  • Granting permissions in SQL Server 2005
    New security features in SQL Server 2005 make it easier to manage and grant permissions on a more granular basis. Get an overview of new features and functions.

  • Top 10 security enhancements in SQL Server 2005
    Here is a high-level list, in no particular order, of perhaps the 10 most significant security enhancements in SQL Server 2005.

  • SQL Server password policies and credentials
    In addition to new security features related to .NET managed code, other new security features will help you tighten authentication through SQL Server logins.

  • Permissions, visibility, UDTs and user-defined aggregates
    A user-defined type must be defined in the SQL Server catalog to be visible to SQL Server stored procedure, then users need the appropriate permission to invoke it.

      Additional security resources Return to Table of Contents

  • SQL Server Security Learning Guide
    From authentication to encryption, get up to speed on SQL Server security techniques.

  • SQL Server Security School
    Take a class in SQL Server security.

  • Topics: Security
    Research security best practices in this topics section.




    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


    RELATED CONTENT
    SQL Server security
    Can I encrypt and restore a database backup in SQL Server 2005?
    FAQ: How to troubleshoot and grant SQL Server permissions
    Secure SQL Server from SQL injection attacks
    How insiders hack SQL databases with free tools and a little luck
    Sarbanes-Oxley compliance checklist: IT security and SQL audits
    SQL Server source code analysis and management adds database security
    Ten common SQL Server security vulnerabilities you may be overlooking
    SQL Server 2008 security and compliance features reduce security risks
    Get your SQL Server security goals in order
    How secure is your SQL Server network design?

    SQL Server 2005 (Yukon)
    Using DATEADD and DATEDIFF to calculate SQL Server datetime values
    Tips for tuning SQL Server 2005 to improve reporting performance
    SQL Server consolidation: Why it's an optimization technique
    Parent-child dimensions in SQL Server 2005 with Analysis Services MDX
    Using SQL Server datetime functions GETDATE, DATENAME and DATEPART
    SSIS error message due to installation problem on SQL Server 2005
    SQL Server data conversions from date/time values to character types
    Basics for working with DATETIME and SMALLDATETIME in SQL Server 2005
    How to configure Database Mail in SQL Server 2005 to send mail
    How to use rank function in SQL Server 2005
    SQL Server 2005 (Yukon) Research

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    data corruption  (SearchSQLServer.com)
    data hiding  (SearchSQLServer.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary


  • HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    SEARCH 
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2005 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts