all groups > sql server msde > june 2006 >
You're in the

sql server msde

group:

MSDE security


Re: MSDE security Norman Yuan
6/15/2006 11:38:17 AM
sql server msde: If your goal is to prevent the user, who owns the computer where the MSDE is
installed, to look into your database design/data, thne you cannot. Yes, the
computer's admin user has all right to install/uninstall and login to the
MSDE and do whatever he wants.

If you want to control the database, the only safe way is to NOT install
database server on a computer you do not have control.

[quoted text, click to view]

MSDE security adiavn
6/15/2006 6:35:53 PM
Hi
I'm trying to figure out how to protect a database located on the client's
computer from tempering.
I created a strong password for the "sa" user, and removed the
"Builtin\Administrators" login from the "system administrators" role, so now
people with no knownledge of the password can't connect to the server.
However, it occurred to me that if some removed the MSDE installation from
the computer (while leaving the database) and re-installed MSDE, the values
for the "sa" and "Builtin\Administrators" logins would be restored, allowing
full access to the db.
Is there any way around this?
Thanks


AddThis Social Bookmark Button