Re: connection options to yukon

Local account is better, because the domain needs to validate everytime
otherwise. Win2k3 is a bit better because it uses kerberos tickets - sending
and validating tickets is quicker than hashes of passwords.
But if it's a local account, that kinda assumes that all your servers are
all on the same machine :-)

- Sahil Malik [MVP]
http://codebetter.com/blogs/sahil.malik/


<param@xxxxxxxxxxxxxxxx> wrote in message
news:%23VurgBvaFHA.3848@xxxxxxxxxxxxxxxxxxxxxxx
>I am leaning towards Windows Authentication too. But what about a domain
>account vs local account? Any pros & cons of one over the other?
>
> thanks!
>
> "Sahil Malik [MVP]" <contactmethrumyblog@xxxxxxxxxx> wrote in message
> news:e1lakyraFHA.2736@xxxxxxxxxxxxxxxxxxxxxxx
>> Connection pooling does not depend on what method you choose to connect -
>> Windows auth or Sql auth.
>> Connection pooling depends on the fact that repeated SqlConnection
>> objects
>> use the exact same connection string.
>>
>> My recommendation would be to use Windows authentication over sql Auth
>> because it is more secure. It is more secure because there is no password
>> to
>> manage :) (or it is managed by the OS).
>>
>> Please let me know if you have any additional questions.
>>
>> - Sahil Malik [MVP]
>> http://codebetter.com/blogs/sahil.malik/
>> My upcoming ADO.NET 2.0 book - http://tinyurl.com/9bync
>>
>>
>>
>>
>> <param@xxxxxxxxxxxxxxxx> wrote in message
>> news:urNVrlkaFHA.2664@xxxxxxxxxxxxxxxxxxxxxxx
>>> Hi all, i am a newbie to SQL2005. I have had experience developing apps
>>> on
>>> .net 1.1 and sql 2000. I am currently working on developing a new
>>> solution
>>> and looking into feasibility of using sql 2005 as the database and .net
>> 1.1
>>> as the front end with the enterprise library jan 2005 block to connect
>>> to
>>> the database. I may also decide to use asp.net 2.0 depending on the new
>>> features available which I am still exploring. The question I had is
>>> what
>> is
>>> the best way for an asp.net application (1.1 or 2.0) to connect to a sql
>>> 2005 database and make best use of connection pooling.
>>>
>>> 1. SQL Server Authentication
>>>
>>> PROS
>>>
>>> 1. No need for windows accounts or cals
>>> 2. Performance
>>>
>>> CONS
>>>
>>> 1. Asp.net app needs to store username & password somewhere.
>>>
>>>
>>> 2. Domain Level Windows Account
>>>
>>> PROS
>>>
>>> 1. No need for application to store password
>>> 2. Easy Management in a Server Farm & DB Connectivity
>>>
>>> CONS
>>>
>>> 1. Performance
>>>
>>> 3. Local Level Windows Account
>>>
>>> PROS
>>>
>>> 1. No need for application to store password
>>> 2. Performance
>>>
>>> CONS
>>>
>>> 1. Complicated management in a server farm and need to create account on
>>> each machine with same name etc.
>>>
>>> 4. SQL 2005 Application Roles?
>>>
>>>
>>> Can anyone make some best practice recommendations?
>>>
>>> Much appreciated!
>>>
>>>
>>>
>>
>>
>
>


.

Relevant Pages

  • RE: Active Directory ports required by SharePoint
    ... \par SPS can use an SQL account to access the remote database instead of windows account, if the SQL server support SQL authentication. ... \par If windows authentication is required, we have to set the two domain trusted each other so that we can user domain B user account in domain A. And here is required ports for this solution: ...
    (microsoft.public.sharepoint.portalserver.development)
  • Service Account
    ... administrative rights to run the SQL Server and the SQL ... up a local account and Outlook 2000 profile for mail to ...
    (microsoft.public.sqlserver.replication)
  • Re: User authentication
    ... I was able to change the owner of a backup to the backup operator (Windows ... account) on a backup job configured on SQL Agent, ... one of the windows groups that has access to SQL Server. ... I am not able to assign the job to a different Windows account. ...
    (microsoft.public.sqlserver.clients)
  • VS.NET Create Web Application Hang
    ... We even created a local account for him to ... That local account allows him to create a web app, ... and created with the user as a Domain Admin. ...
    (microsoft.public.dotnet.general)
  • Re: PLEASE HELP - USENET/Proxy Security Question
    ... And it appears, for the most part, that the MS Proxy is really the only ... I needed to gain access to the administrator account on my box so I set the ... this local account, I pointed everything to the proxy and it worked. ... What is different when reporting connections ...
    (alt.computer.security)
Loading