Other ways to stop this from occuring?

SQL2K now, but will be going to 2005 shortly.
Howdy all. All of our apps (both inTRAnet and inTERNET) use SQL
authentication to connect to the DB's. I am well aware of the reasoning to
use WINNT authentication instead of SQL authentication, but this is currently
what we do. There are some folks on a mission to get this to change as they
want "single sign on" for their apps, but I am quite reluctant for the
following reason:
We have thousands of employees here. Currently, none of them can connect to
my OLTP server from outside the app and run their own ad-hoc queries/ DML/
etc. because their Windows account doesnâ't have permissions to do so and they
donâ't have the password to the SQL account that the app uses. I ever need to
worry the end user that decides to use MS Access to query huge amounts of
data to his remote location and causes blocking without realizing it. Nor do
I ever need to worry about the developer who likes to run his tests in Prod,
pegging the CPU, because his test environment doesnâ't contain all the data he
needs. These are scenarios Iâ've run into in other organizations. Like it or
not, SQL Authentication does provide these benefits. I do have a reporting
server set up for stuff like this currently, but I donâ't care about these
things taking place on that box.
So the options that I see:
1. Only allow apps to use stored procedures (no dynamic code). This option
just aint gonna happen. Iâ've got over 100 DBâ's already, and I think only 1
adheres to this best practice.
2. Have all apps that want to start using WINNT auth use Application Roles.
This way only the app can connect to the DB, not individual logins. I have no
issue with this, but suspect all the developers that need to re-write their
apps would.
3. Use firewalls to only allow DB connections directly from the app and web
servers. An exception box would probably need to be set up for administrators
to use tools like Enterprise Manager.
These are the options that I see, and was wondering if anyone else has any
other ideas?
TIA, ChrisR.Hi Chris
You should be selective in what users can actually log on to the specific
instances and not allow "Domain Users" this right but a sub group. If a
(different) group of users are allowed to access the database then they
should have the minimum permissions needed to do that so they are forced to
use the application role. If you are using auditing make sure that the
application role is not masking this.
John
"ChrisR" wrote:
> SQL2K now, but will be going to 2005 shortly.
> Howdy all. All of our apps (both inTRAnet and inTERNET) use SQL
> authentication to connect to the DB's. I am well aware of the reasoning to
> use WINNT authentication instead of SQL authentication, but this is currently
> what we do. There are some folks on a mission to get this to change as they
> want "single sign on" for their apps, but I am quite reluctant for the
> following reason:
> We have thousands of employees here. Currently, none of them can connect to
> my OLTP server from outside the app and run their own ad-hoc queries/ DML/
> etc. because their Windows account doesnâ't have permissions to do so and they
> donâ't have the password to the SQL account that the app uses. I ever need to
> worry the end user that decides to use MS Access to query huge amounts of
> data to his remote location and causes blocking without realizing it. Nor do
> I ever need to worry about the developer who likes to run his tests in Prod,
> pegging the CPU, because his test environment doesnâ't contain all the data he
> needs. These are scenarios Iâ've run into in other organizations. Like it or
> not, SQL Authentication does provide these benefits. I do have a reporting
> server set up for stuff like this currently, but I donâ't care about these
> things taking place on that box.
> So the options that I see:
> 1. Only allow apps to use stored procedures (no dynamic code). This option
> just aint gonna happen. Iâ've got over 100 DBâ's already, and I think only 1
> adheres to this best practice.
> 2. Have all apps that want to start using WINNT auth use Application Roles.
> This way only the app can connect to the DB, not individual logins. I have no
> issue with this, but suspect all the developers that need to re-write their
> apps would.
> 3. Use firewalls to only allow DB connections directly from the app and web
> servers. An exception box would probably need to be set up for administrators
> to use tools like Enterprise Manager.
> These are the options that I see, and was wondering if anyone else has any
> other ideas?
> TIA, ChrisR.
>
>

OS requirements for 2005.

Howdy all. Im considering buying a new home PC, and would like to install
the developer edition of SQL 2005 once I have it. Most new PC's that Im
looking at have either WIN XP Home or Media Center. I see the requirements
for SQL 2005 here:
http://www.microsoft.com/sql/editions/developer/sysreqs.mspx
but it doesnt say specifically if these versions of the OS will work or not.
I know it will install fine on XP Pro, but Id like to avoid the purchase
upgrade if possible. Can someone please assist?
TIA, CFR
Thanks for the speedy response!
"Theo Verweij" <tverweij@.xs4all.nl> wrote in message
news:eAdEHPCAHHA.4348@.TK2MSFTNGP04.phx.gbl...[vbcol=seagreen]
> Home and Media Centre does not have an IIS aboard. So all functionality
> (like reporting services, http endpoinds, etc) that need IIS won't work
> with these versions.
> To use all functions in SQL, you need a pro or a server.
> ChrisR wrote:
install[vbcol=seagreen]
requirements[vbcol=seagreen]
not.[vbcol=seagreen]
|||You will need SP2 for Home Edition.
And if you want to do development that requires IIS, this article may help.
Installing IIS on Windows XP Home Edition
http://www.webthang.co.uk/Tuts/tuts_server/iis_xph/pippo_xp.asp
Arnie Rowland, Ph.D.
Westwood Consulting, Inc
Most good judgment comes from experience.
Most experience comes from bad judgment.
- Anonymous
You can't help someone get up a hill without getting a little closer to the
top yourself.
- H. Norman Schwarzkopf
"ChrisR" <noFudgingWay@.NoEmail.com> wrote in message
news:%23c%23WZMCAHHA.4428@.TK2MSFTNGP04.phx.gbl...
> Howdy all. Im considering buying a new home PC, and would like to install
> the developer edition of SQL 2005 once I have it. Most new PC's that Im
> looking at have either WIN XP Home or Media Center. I see the requirements
> for SQL 2005 here:
> http://www.microsoft.com/sql/editions/developer/sysreqs.mspx
> but it doesnt say specifically if these versions of the OS will work or
> not.
> I know it will install fine on XP Pro, but Id like to avoid the purchase
> upgrade if possible. Can someone please assist?
> TIA, CFR
>

OS requirements for 2005.

Howdy all. Im considering buying a new home PC, and would like to install
the developer edition of SQL 2005 once I have it. Most new PC's that Im
looking at have either WIN XP Home or Media Center. I see the requirements
for SQL 2005 here:
http://www.microsoft.com/sql/editions/developer/sysreqs.mspx
but it doesnt say specifically if these versions of the OS will work or not.
I know it will install fine on XP Pro, but Id like to avoid the purchase
upgrade if possible. Can someone please assist?
TIA, CFRHome and Media Centre does not have an IIS aboard. So all functionality
(like reporting services, http endpoinds, etc) that need IIS won't work
with these versions.
To use all functions in SQL, you need a pro or a server.
ChrisR wrote:
> Howdy all. Im considering buying a new home PC, and would like to install
> the developer edition of SQL 2005 once I have it. Most new PC's that Im
> looking at have either WIN XP Home or Media Center. I see the requirements
> for SQL 2005 here:
> http://www.microsoft.com/sql/editions/developer/sysreqs.mspx
> but it doesnt say specifically if these versions of the OS will work or not.
> I know it will install fine on XP Pro, but Id like to avoid the purchase
> upgrade if possible. Can someone please assist?
> TIA, CFR
>|||Thanks for the speedy response!
"Theo Verweij" <tverweij@.xs4all.nl> wrote in message
news:eAdEHPCAHHA.4348@.TK2MSFTNGP04.phx.gbl...
> Home and Media Centre does not have an IIS aboard. So all functionality
> (like reporting services, http endpoinds, etc) that need IIS won't work
> with these versions.
> To use all functions in SQL, you need a pro or a server.
> ChrisR wrote:
> > Howdy all. Im considering buying a new home PC, and would like to
install
> > the developer edition of SQL 2005 once I have it. Most new PC's that Im
> > looking at have either WIN XP Home or Media Center. I see the
requirements
> > for SQL 2005 here:
> >
> > http://www.microsoft.com/sql/editions/developer/sysreqs.mspx
> >
> > but it doesnt say specifically if these versions of the OS will work or
not.
> > I know it will install fine on XP Pro, but Id like to avoid the purchase
> > upgrade if possible. Can someone please assist?
> >
> > TIA, CFR
> >
> >|||You will need SP2 for Home Edition.
And if you want to do development that requires IIS, this article may help.
Installing IIS on Windows XP Home Edition
http://www.webthang.co.uk/Tuts/tuts_server/iis_xph/pippo_xp.asp
--
Arnie Rowland, Ph.D.
Westwood Consulting, Inc
Most good judgment comes from experience.
Most experience comes from bad judgment.
- Anonymous
You can't help someone get up a hill without getting a little closer to the
top yourself.
- H. Norman Schwarzkopf
"ChrisR" <noFudgingWay@.NoEmail.com> wrote in message
news:%23c%23WZMCAHHA.4428@.TK2MSFTNGP04.phx.gbl...
> Howdy all. Im considering buying a new home PC, and would like to install
> the developer edition of SQL 2005 once I have it. Most new PC's that Im
> looking at have either WIN XP Home or Media Center. I see the requirements
> for SQL 2005 here:
> http://www.microsoft.com/sql/editions/developer/sysreqs.mspx
> but it doesnt say specifically if these versions of the OS will work or
> not.
> I know it will install fine on XP Pro, but Id like to avoid the purchase
> upgrade if possible. Can someone please assist?
> TIA, CFR
>

OS requirements for 2005.

Howdy all. Im considering buying a new home PC, and would like to install
the developer edition of SQL 2005 once I have it. Most new PC's that Im
looking at have either WIN XP Home or Media Center. I see the requirements
for SQL 2005 here:
http://www.microsoft.com/sql/editio...er/sysreqs.mspx
but it doesnt say specifically if these versions of the OS will work or not.
I know it will install fine on XP Pro, but Id like to avoid the purchase
upgrade if possible. Can someone please assist?
TIA, CFRHome and Media Centre does not have an IIS aboard. So all functionality
(like reporting services, http endpoinds, etc) that need IIS won't work
with these versions.
To use all functions in SQL, you need a pro or a server.
ChrisR wrote:
> Howdy all. Im considering buying a new home PC, and would like to install
> the developer edition of SQL 2005 once I have it. Most new PC's that Im
> looking at have either WIN XP Home or Media Center. I see the requirements
> for SQL 2005 here:
> http://www.microsoft.com/sql/editio...er/sysreqs.mspx
> but it doesnt say specifically if these versions of the OS will work or no
t.
> I know it will install fine on XP Pro, but Id like to avoid the purchase
> upgrade if possible. Can someone please assist?
> TIA, CFR
>|||Thanks for the speedy response!
"Theo Verweij" <tverweij@.xs4all.nl> wrote in message
news:eAdEHPCAHHA.4348@.TK2MSFTNGP04.phx.gbl...[vbcol=seagreen]
> Home and Media Centre does not have an IIS aboard. So all functionality
> (like reporting services, http endpoinds, etc) that need IIS won't work
> with these versions.
> To use all functions in SQL, you need a pro or a server.
> ChrisR wrote:
install[vbcol=seagreen]
requirements[vbcol=seagreen]
not.[vbcol=seagreen]|||You will need SP2 for Home Edition.
And if you want to do development that requires IIS, this article may help.
Installing IIS on Windows XP Home Edition
http://www.webthang.co.uk/Tuts/tuts...ph/pippo_xp.asp
Arnie Rowland, Ph.D.
Westwood Consulting, Inc
Most good judgment comes from experience.
Most experience comes from bad judgment.
- Anonymous
You can't help someone get up a hill without getting a little closer to the
top yourself.
- H. Norman Schwarzkopf
"ChrisR" <noFudgingWay@.NoEmail.com> wrote in message
news:%23c%23WZMCAHHA.4428@.TK2MSFTNGP04.phx.gbl...
> Howdy all. Im considering buying a new home PC, and would like to install
> the developer edition of SQL 2005 once I have it. Most new PC's that Im
> looking at have either WIN XP Home or Media Center. I see the requirements
> for SQL 2005 here:
> http://www.microsoft.com/sql/editio...er/sysreqs.mspx
> but it doesnt say specifically if these versions of the OS will work or
> not.
> I know it will install fine on XP Pro, but Id like to avoid the purchase
> upgrade if possible. Can someone please assist?
> TIA, CFR
>