Security issues

Posted on 2004-04-30
Medium Priority
Last Modified: 2012-08-13

I'm using msde2000. In my app i'm using sql security for the databases. I also provide functions in the application for backup and restore.
My backup function, calls the this sql command:  backup database <dbname> to disk = 'fisicalpath'
where fisicalpath is often on a removeable device like pendrive or zipdisks.

On target machine i disabled the trusted connection by denying access to any windows user (particullary BUILTIN\Administrators) so the user can't access to database data directly.

But... If take the file and restore it on a different machine running sql server and it allows me to access any data in the database without any password. Is there a system to protect unautorized access to mdf file even after restore?
Question by:Dav_ix
LVL 34

Expert Comment

ID: 10962683
Nope....you're at the mercy of the users/logins that are available on the target server....

Author Comment

ID: 11527974

I resolved it by myself:

when backing up the database use the following t-sql statement:

backup database <dbname> to disk = 'fisicalpath' with password = 'mypasswordhere'

if you want to restore the database:

restore database <dbname> from disk = 'fisicalpath' with password = 'mypasswordhere'

Accepted Solution

GhostMod earned 0 total points
ID: 11560545
PAQd, 250 points refunded  the asker posted their solution

Community Support Moderator

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

In part one, we reviewed the prerequisites required for installing SQL Server vNext. In this part we will explore how to install Microsoft's SQL Server on Ubuntu 16.04.
Microsoft provides a rich set of technologies for High Availability and Disaster Recovery solutions.
Via a live example combined with referencing Books Online, show some of the information that can be extracted from the Catalog Views in SQL Server.
Viewers will learn how to use the SELECT statement in SQL to return specific rows and columns, with various degrees of sorting and limits in place.

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question