Re: Securing Microsoft SQL Enterprise Manager

From: Essien (Essien_at_discussions.microsoft.com)
Date: 07/21/04

  • Next message: The Poster Formerly Known as Kline Sphere: "Re: Securing Microsoft SQL Enterprise Manager" 
    Date: Wed, 21 Jul 2004 07:03:05 -0700

    Thanks for your post. I tried a few things yesterday after your first post. I can restrict access to mmc by enabling the Author mode ie preventing access from command line. I can also remove the Enterprise Manager snap-in.

    The problem is restricting some users and granting some access to MMC on a Local Computer.

    What do you say I should use to restrict access to SQLmmc.dll? Is it Active Directory or ACLS? If is either of the two, please give me an idea on how to go about it.

    Thank you.
    Best regards, 

    -- 
Disney
"The Poster Formerly Known as Kline Spher" wrote:
> > I would be most grateful if you could explain how to restrict access to  MMC. 
> 
> One way would be to use acl's to restrict access to the sqlmmc.dll
> file.
> 
> More importantly, never ever give users more access to a database (and
> other resources) than they need to do their job.
> 
> >Secondly, at what point during SQL installation on the client should I restrict Enterprise Manager snap-in ?
> 
> Cut and pasted from bol (2004): -
> 
> Management Tools
> 
> These components can be installed from the Management Tools category
> in the Select Components dialog box, when running Setup. Management
> tools are included when the option for Client Tools Only is selected
> as an initial installation choice.
> 
> Enterprise Manager
> 
> Used to perform server and enterprise administrative tasks.
> 
> Profiler
> 
> Used to monitor, record, and support auditing of Microsoft SQL Server
> database activity.
> 
> Query Analyzer
> 
> Used to enter Transact-SQL statements and procedures interactively.
> Also provides graphical query analysis in the form of graphical
> showplans. 
> 
> DTC Client Support
> 
> Used to extend database transactions across multiple servers. 
> 
> Microsoft Distributed Transaction Coordinator (MS DTC) coordinates
> transactions across a network of systems running Microsoft Windows
> NT®, Microsoft Windows® 98, and Microsoft Windows 95.
> 
> Conflict Viewer
> 
> Used to view and, if necessary, change the way synchronization
> conflicts are resolved.
> 
> 
> 
> Kline Sphere (Chalk) MCNGP #3
>
  • Next message: The Poster Formerly Known as Kline Sphere: "Re: Securing Microsoft SQL Enterprise Manager"

    Relevant Pages

    • Re: Securing Microsoft SQL Enterprise Manager
      ... I would be most grateful if you could explain how to restrict access to MMC. ... at what point during SQL installation on the client should I restrict Enterprise Manager snap-in? ...
      (microsoft.public.cert.mcdba)
    • Re: Securing Microsoft SQL Enterprise Manager
      ... > I would be most grateful if you could explain how to restrict access to MMC. ... These components can be installed from the Management Tools category ... Used to monitor, record, and support auditing of Microsoft SQL Server ... Used to extend database transactions across multiple servers. ...
      (microsoft.public.cert.mcdba)
    • Re: How to restrict access to desktop
      ... Glad to hear Folder Redirection is for your purpose. ... Microsoft Online Support ... Microsoft Global Technical Support Center ... | Subject: Re: How to restrict access to desktop ...
      (microsoft.public.windows.group_policy)
    • Re: How to restrict access to desktop
      ... Glad to hear Folder Redirection is for your purpose. ... Microsoft Online Support ... Microsoft Global Technical Support Center ... | Subject: Re: How to restrict access to desktop ...
      (microsoft.public.windows.group_policy)