Re: Securing Microsoft SQL Enterprise Manager

From: The Poster Formerly Known as Kline Sphere (.)
Date: 07/20/04 

Date: Tue, 20 Jul 2004 19:28:09 +0100

> I would be most grateful if you could explain how to restrict access to MMC.

One way would be to use acl's to restrict access to the sqlmmc.dll
file.

More importantly, never ever give users more access to a database (and
other resources) than they need to do their job.

>Secondly, at what point during SQL installation on the client should I restrict Enterprise Manager snap-in ?

Cut and pasted from bol (2004): -

Management Tools

These components can be installed from the Management Tools category
in the Select Components dialog box, when running Setup. Management
tools are included when the option for Client Tools Only is selected
as an initial installation choice.

Enterprise Manager

Used to perform server and enterprise administrative tasks.

Profiler

Used to monitor, record, and support auditing of Microsoft SQL Server
database activity.

Query Analyzer

Used to enter Transact-SQL statements and procedures interactively.
Also provides graphical query analysis in the form of graphical
showplans.

DTC Client Support

Used to extend database transactions across multiple servers.

Microsoft Distributed Transaction Coordinator (MS DTC) coordinates
transactions across a network of systems running Microsoft Windows
NT®, Microsoft Windows® 98, and Microsoft Windows 95.

Conflict Viewer

Used to view and, if necessary, change the way synchronization
conflicts are resolved.

Kline Sphere (Chalk) MCNGP #3

Relevant Pages

  • Re: duplicates query help & strategy for update queries with SetWarnings = False
    ... In a Microsoft Jet workspace, if you provide a syntactically correct SQL statement and have the appropriate permissions, the Execute method won't fail — even if not a single row can be modified or deleted. ... always use the dbFailOnError option when using the Execute method to run an update or delete query. ... In earlier versions of the Microsoft Jet Database Engine, SQL statements were automatically embedded in implicit transactions. ...
    (comp.databases.ms-access)
  • Re: Account lockouts
    ... and then download the Account lockout and management tools from ... I know you've already tracked through some logs. ... Microsoft MVP - Windows Server - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to restrict access to desktop
    ... Glad to hear Folder Redirection is for your purpose. ... Microsoft Online Support ... Microsoft Global Technical Support Center ... | Subject: Re: How to restrict access to desktop ...
    (microsoft.public.windows.group_policy)
  • Re: Securing Microsoft SQL Enterprise Manager
    ... I can restrict access to mmc by enabling the Author mode ie preventing access from command line. ... at what point during SQL installation on the client should I restrict Enterprise Manager snap-in? ... > Used to monitor, record, and support auditing of Microsoft SQL Server ...
    (microsoft.public.cert.mcdba)
  • Re: How to restrict access to desktop
    ... Glad to hear Folder Redirection is for your purpose. ... Microsoft Online Support ... Microsoft Global Technical Support Center ... | Subject: Re: How to restrict access to desktop ...
    (microsoft.public.windows.group_policy)