Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
Ger
Starting Member
11 Posts |
 Posted - 2002-07-17 : 11:23:05
|
| I can't figure out what to set in the server to block access from a client computer running the Enterprise Manager. I just want it to prompt for a SQL login / password so that all set permissions apply, but I get in without identification and I have administrator privileges. I reinstalled the EM in the client and it's still the same. The weirdest thing is that I did get the EM to prompt for login AT THE SERVER ITSELF. Not at clients! Please help! Thanks! |
|
|
robvolk
Most Valuable Yak
15732 Posts |
Posted - 2002-07-17 : 11:37:46
|
| You need to delete the current registration for that server at ALL of the client computers, and then re-register it. There is a property to require a login each time, you need to check that.The problem is that the clients can just as easily change that property to store the password so that they don't have to enter it each time.If you really want to secure your server so that the clients have limited/controlled access, you have to take away Enterprise Manager. Frankly, no end-user should have it anyway. If they need to query the database let them use Query Analyzer, or, it they're dumb and need to browse, create an Access database with linked tables to the SQL Server.As long as they're allowed to use Enterprise Manager you'll be chasing your tail trying to control their access. |
 |
|
|
AjarnMark
SQL Slashing Gunting Master
3246 Posts |
Posted - 2002-07-17 : 20:21:15
|
| Enterprise Manager respects whatever permissions apply to the user info that was input when the server was Registered in EM. So, if the user info in the registration is for a login that has limited permissions, EM will respect that. We have a SQL Server with 50+ databases on it, yet our users can only get into the 3-7 DB's that they have permission to.If you Registered the server by using a sysadmin account, they've got full privileges. |
|
|
|
Ger
Starting Member
11 Posts |
Posted - 2002-07-18 : 09:50:12
|
| Thanks guys! I will see what I can do with your suggestions! |
|
|
|
Ger
Starting Member
11 Posts |
Posted - 2002-07-18 : 11:34:31
|
| All right!I re-registered my own access to the server and found the option to prompt for connection, now everytime I connect with EM I'm forced to login. Good!I prefer not to have clients with EM (only one has apart from me), but I have no control over all client computers. I'm concerned about protecting the DB, even if somebody installs a copy of EM by themselves. If they do, they'll have to provide a login anyway, and they don't have an administrator login.Thank you. Too bad I have to improvise, but that's how things are done around here!! |
|
|
|
robvolk
Most Valuable Yak
15732 Posts |
Posted - 2002-07-18 : 11:48:57
|
| I'd also recommend changing the sa password, just to be safe from anyone who might have gotten it previously. |
|
|
|
Ger
Starting Member
11 Posts |
Posted - 2002-07-18 : 15:10:20
|
| I did, thank you! :) |
|
|
|
|
|
|
|
|
enterprise manager free pass from client! :(