Re: Securing an MDF file

From: Hari Prasad (hari_prasad_k_at_hotmail.com)
Date: 07/27/04 

Date: Tue, 27 Jul 2004 11:03:35 +0530

Hi,

You can use the Encrypted File System Support on Windows 2000

Windows 2000 support encrypted file system property.

Below are the steps encrypt the data files:

1) Logon with the SQL Server startup account

2) Stop SQL Server and sql agent service

3) Right click the data files, select properties, click Advance button,
check the "Encrypt contents to secure data"

4) Start the SQL Server service

See the below KB for more information:-

HOW TO: Encrypt Data Using EFS in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;en-us;230520

Note:

If you change the SQL Server startup accout you have to redo the same,
otherwise SQL Server service will not start.

"With EFS, database files are encrypted under the identity of the account
running SQL Server. Only this account can decrypt the files. If you need to
change the account that runs SQL Server, you should first decrypt the files
under the old account, then re-encrypt them under the new account." 

--
Thanks
Hari
MCDBA
"Brian McGuigan" <Brian McGuigan@discussions.microsoft.com> wrote in message
news:9F7AB169-5441-4B27-8D15-C3D29C7E53FC@microsoft.com...
> We are creating and installing a custom application using an MDF file
under SQL Server 2000.  We create our own MSDE Instance to deploy our
Aplication.  We wish to protect both the data and the structure of this file
from a Database Adminisatrator who has another SQL Server installation on
the same machine.  Is this possible and how do we go about it?  Can we
assign Password Protection at the overall MDF File level?