Cant comment on SQL 2005 as i dont know enough about it yet, but if this is SQL 2000 then irrespective of what SQL permissions are granted, if someone stops sql and attatches the DBs to another SQL database then the'll bypass the security. The only thing you can do is either secure the box itself (ie not on clients server) or encrypt the database.
Main Topics
Browse All Topics





by: acperkinsPosted on 2006-03-23 at 10:46:42ID: 16272649
You cannot deny sa to specific databases. You can deny sa from the whole server by setting SQL Server to use Windows Authentication only.