Re: Why is SQL Server account used?

From: Tibor Karaszi (tibor_please.no.email_karaszi_at_hotmail.nomail.com)
Date: 01/25/05


Date: Tue, 25 Jan 2005 11:56:55 +0100


> The ultimate irony is that we
> have a security monitoring application that monitors security across the
> enterprise (Windows server, Unix servers and mainframes) and uses SQL
> Security. I ask them to rectify this fault every time I can.

LOL.
:-)

-- 
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
http://www.sqlug.se/
"John Bandettini" <JohnBandettini@discussions.microsoft.com> wrote in message 
news:FD72B473-051C-4009-998C-3A926DBC09C5@microsoft.com...
>I think that as well as the time involved, developers use SQL Server security
> because they are being lazy and they don't worry about the security
> implications.
>
> Our standards call for windows only security, but a lot of packages we use
> do not conform to this. We hammer at out 3rd Party suppliers all the time
> that we want them to change their security. The ultimate irony is that we
> have a security monitoring application that monitors security across the
> enterprise (Windows server, Unix servers and mainframes) and uses SQL
> Security. I ask them to rectify this fault every time I can.
>
> Regards
>
> John
>
> "Tibor Karaszi" wrote:
>
>> My opinions:
>>
>> > What is a reason that vendors want to use SQL Server login?
>>
>> The vendor didn't have time to learn about Windows logins.
>>
>> > Is there any difficulty when I use SQL Server authentication to install a product?
>>
>> Not really.
>>
>>
>> > What is security policy at your shop?
>>
>> I prefer to run my SQL Servers in "Windows only" mode. But often, 3:rd party applications that 
>> only
>> supports SQL Server logins prohibits this.
>>
>>
>> > What is the best way to determine an authentication to install products?
>>
>> Read the manual for the product in question.
>>
>>
>> -- 
>> Tibor Karaszi, SQL Server MVP
>> http://www.karaszi.com/sqlserver/default.asp
>> http://www.solidqualitylearning.com/
>> http://www.sqlug.se/
>>
>>
>> "Do Park via SQLMonster.com" <forum@SQLMonster.com> wrote in message
>> news:f30e364dfc28479bba11f98a60f9b891@SQLMonster.com...
>> > Hello
>> >
>> > I tried to use window authentication rather than SQL server account,
>> > But vendors want to use SQL Server account to install products.
>> >
>> > The vendor said that I should use SQL Sever login before I install a product. I used Window
>> > Authentication to install the product. It worked.
>> >
>> > What is a reason that vendors want to use SQL Server login?
>> > Is there any difficulty when I use SQL Server authentication to install a product?
>> > What is security policy at your shop?
>> > What is the best way to determine an authentication to install products?
>> >
>> > Thanks in advance,
>> > Do.
>> >
>> > -- 
>> > Message posted via http://www.sqlmonster.com
>>
>>
>> 


Relevant Pages

  • SecurityFocus Microsoft Newsletter #164
    ... Got Storage Security Risks? ... MICROSOFT VULNERABILITY SUMMARY ... Chat Client FTP Server Default Username Credential Weak... ... NetServe Web Server is a compact web server for Microsoft Windows ...
    (Focus-Microsoft)
  • Re: im being held in memory
    ... How can I harden my computer or server to secure it from hackers? ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.security)
  • MS and security: good effort but no cigar
    ... build upon the progress it's already made in security. ... The low-hanging fruit of millions of insecure Windows machines ... Then there's the issue of poorly secured server applications. ... and execute external virus and filtering ...
    (microsoft.public.windowsxp.general)
  • SecurityFocus Microsoft Newsletter #167
    ... MICROSOFT VULNERABILITY SUMMARY ... Multiple Vendor XML Parser SOAP Server Denial Of Service Vul... ... Proactive Windows Security Explorer ...
    (Focus-Microsoft)
  • Re: Group Policy broke my DCs
    ... to be very careful with tweaking services on domain controllers. ... Group Policy - security policy at the OU level which makes it much easier to ... complied from the Windows 2003 Server Security guide for baseline core ... Server - automatic ...
    (microsoft.public.windows.group_policy)