Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Security issues

Posted on 2004-04-30
4
Medium Priority
?
302 Views
Last Modified: 2012-08-13
Hi,

I'm using msde2000. In my app i'm using sql security for the databases. I also provide functions in the application for backup and restore.
My backup function, calls the this sql command:  backup database <dbname> to disk = 'fisicalpath'
where fisicalpath is often on a removeable device like pendrive or zipdisks.

On target machine i disabled the trusted connection by denying access to any windows user (particullary BUILTIN\Administrators) so the user can't access to database data directly.

But... If take the file and restore it on a different machine running sql server and it allows me to access any data in the database without any password. Is there a system to protect unautorized access to mdf file even after restore?
0
Comment
Question by:Dav_ix
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 34

Expert Comment

by:arbert
ID: 10962683
Nope....you're at the mercy of the users/logins that are available on the target server....
0
 

Author Comment

by:Dav_ix
ID: 11527974

I resolved it by myself:

when backing up the database use the following t-sql statement:

backup database <dbname> to disk = 'fisicalpath' with password = 'mypasswordhere'

if you want to restore the database:

restore database <dbname> from disk = 'fisicalpath' with password = 'mypasswordhere'
0
 
LVL 1

Accepted Solution

by:
GhostMod earned 0 total points
ID: 11560545
PAQd, 250 points refunded  the asker posted their solution

GhostMod
Community Support Moderator
0

Featured Post

Tech or Treat!

Submit an article about your scariest tech experience—and the solution—and you’ll be automatically entered to win one of 4 fantastic tech gadgets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A Stored Procedure in Microsoft SQL Server is a powerful feature that it can be used to execute the Data Manipulation Language (DML) or Data Definition Language (DDL). Depending on business requirements, a single Stored Procedure can return differe…
When trying to connect from SSMS v17.x to a SQL Server Integration Services 2016 instance or previous version, you get the error “Connecting to the Integration Services service on the computer failed with the following error: 'The specified service …
Via a live example, show how to setup several different housekeeping processes for a SQL Server.
Using examples as well as descriptions, and references to Books Online, show the documentation available for datatypes, explain the available data types and show how data can be passed into and out of variables.

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question