SQL Server Express Security?
Oct 21, 2005
We are releasing an application built on SQL Server Express in the next few months. Our clients are mostly small companies with little technical knowledge, and they will be using our application on desktop computers where everyone likely logs in as the same user. As such, my thinking is that we setup SQL Server Express as in SQL Server Authentication mode. This way they could select an Administrator password upon first installation, and manage user names and passwords from within the application itself.
View 22 Replies
ADVERTISEMENT
Apr 16, 2007
I've built this prototype web app in asp.net 2.0
it uses a sql server express database.
It uses the database to populate a grid control.
It works when I run it from my pc when I
1). run it in debug mode.
2) right click a page in the vs2005 IDE and browse
3). browse a page from the IIS snap in
it doesn't work from other peoples PC on our intranet say if someone types:
http://xxx.xxx.xx.xx/mywebapp/default.aspx because I get this result:
Server Error in '/FocusII_Website' Application.
--------------------------------------------------------------------------------
User does not have permission to perform this action.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Data.SqlClient.SqlException: User does not have permission to perform this action.
Source Error:
Line 82:
Line 83: SqlDataAdapter da = new SqlDataAdapter(sql, ConfigurationManager.ConnectionStrings["sqlExpress"].ToString());
Line 84: da.Fill(ds);
Line 85: RadGrid1.DataSource = ds;
Line 86: RadGrid1.DataBind();
Source File: c:InetpubwwwrootFocusII_WebsiteUnitGridPrototype.aspx.cs Line: 84
Stack Trace:
[SqlException (0x80131904): User does not have permission to perform this action.]
System.Data.ProviderBase.DbConnectionPool.GetConnection(DbConnection owningObject) +437
System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection) +82
System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory) +105
System.Data.SqlClient.SqlConnection.Open() +111
System.Data.Common.DbDataAdapter.FillInternal(DataSet dataset, DataTable[] datatables, Int32 startRecord, Int32 maxRecords, String srcTable, IDbCommand command, CommandBehavior behavior) +121
System.Data.Common.DbDataAdapter.Fill(DataSet dataSet, Int32 startRecord, Int32 maxRecords, String srcTable, IDbCommand command, CommandBehavior behavior) +137
System.Data.Common.DbDataAdapter.Fill(DataSet dataSet) +86
UnitGridPrototype.Page_Load(Object sender, EventArgs e) in c:InetpubwwwrootFocusII_WebsiteUnitGridPrototype.aspx.cs:84
System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e) +15
System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e) +34
System.Web.UI.Control.OnLoad(EventArgs e) +99
System.Web.UI.Control.LoadRecursive() +47
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1061
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:2.0.50727.42; ASP.NET Version:2.0.50727.42
Impersonation is set to TRUE
Anonymous access is checked.
Integrated Windows Authentication is checked..
aspnet, iusr accounts have full privs on the data directory,,,,,
I'm at a loss..
View 1 Replies
View Related
Jun 8, 2007
Is there a way to implement Access-like password protection on a SQL Server Express dataset?
The database will be deployed on individual's PCs with no centralization of control. I want to restrict users from being able to see table definitions, stored procedures, etc. Access-like password protection is what I want, but I don't see any similar feature within SQL Server Express. Am I missing something?
View 1 Replies
View Related
Nov 22, 2006
Hi,
I'm quite new to SQL Server Express and am having trouble with security. I have SQL Server Express installed on one of our servers and want to limit access to this instance of SQL Server, and basically grant access to only certain users within our organisation. However it seems that by default everyone can connect to SQL Server.
First of all I enabled local and remote connections. I did not grant anyone access permissions under Logins, and then went back to my workstation and tried to connect to the instance of SQL Server using SQL Server Management Studio which I have installed locally. I presumed and hoped that it would come up with a message saying that I don't have access permissions to connect to SQL Server, but instead it let me connect and even create a new database.
I then went back to the server and changed EACH Login to Deny under Login Properties -> Status -> Permission to connect to Database Engine. Then I returned to my client and tried to connect again and it still succeeds and allows me to create/delete tables/ databases/etc.
Can someone please explain why this is? If any more details are required to answer this question let me know.
Thanks!!
View 7 Replies
View Related
Sep 14, 2007
Please how are security patches for SQL Server Express 2005 made available (e.g., as seperate distributions or bundled into other Microsoft patch distribution mechanisms)? Are there specific procedures that I need to put in place to ensure that SQL Server Express 2005 gets patched on end user machines?
View 1 Replies
View Related
Nov 20, 2006
Hi,I have a ASP.net 2.0 web app which i want to run on IIS. It has a database file stored in APP_DATA folder. I have set "UserInstance" property to False, as want to access the same database file from another app, which can do its own modification. So basically i want the same database to be shared. Now after putting the web app on IIS i am getting error like :Login failed for user ''. The user is not associated with a trusted SQL Server connection.Any idea of how to solve this?
View 1 Replies
View Related
Sep 11, 2006
Hello,
I have created one application in visual studio 2005 and also created setup project of that application. now i want to install SQL Server Express edition with my application. so i have checked SQL Server Express 2005 in Setup Project Properities(Prerequisites...). now i want to change SQL Secirty Mode during setup. and i don't know how can we do this?
Any idia?
View 6 Replies
View Related
Aug 2, 2007
Hi All,
I have noticed in the database logs that someone is trying to log
into our SQL Server express databases, is there a way of allowing only IP
address on a list to access the database. We really only need the local machine
and the office using SQL Express management studio to access the database.
I would appreciate any help sometimes the database runs very
slow and we do not know what is causing this.
We are running server 2003 and SQL Server express.
Thanks in advance.
Lee
View 1 Replies
View Related
May 1, 2008
Hello, I'm installing MOSS 2007 as stand alone which includes SQL Server 2005 Express edition. My install is failing during the DB install. The server is Windows Server 2003, Enterprise Edition SP 2.
The error I'm receiving states "Setup has encountered an unexpected error while updating security settings on HTTP Services".
Here are snippets including the "return value 3" found in the log "SQLSetup0001_COHNTFS15_SQL.log".
Snippet 1:
<Func Name='LaunchFunction'>
Function=Do_sqlPerfmon2
<Func Name='GetCAContext'>
<EndFunc Name='GetCAContext' Return='T' GetLastError='0'>
Doing Action: Do_sqlPerfmon2
PerfTime Start: Do_sqlPerfmon2 : Thu May 01 08:36:14 2008
<Func Name='Do_sqlPerfmon2'>
<EndFunc Name='Do_sqlPerfmon2' Return='0' GetLastError='2'>
PerfTime Stop: Do_sqlPerfmon2 : Thu May 01 08:36:14 2008
MSI (s) (D8:EC) [08:36:14:535]: Executing op: ActionStart(Name=Do_PropSetLoginModeNT.D20239D7_E87C_40C9_9837_E70B8D4882C2,Description=Setting SQL Server Authentication Mode,)
<EndFunc Name='LaunchFunction' Return='0' GetLastError='0'>
MSI (s) (D8:EC) [08:36:14:535]: Executing op: CustomActionSchedule(Action=Do_PropSetLoginModeNT.D20239D7_E87C_40C9_9837_E70B8D4882C2,ActionType=1025,Source=BinaryData,Target=Do_PropSetLoginModeNT,CustomActionData=010Setting SQL Server Authentication Mode50000MSSQL.1)
MSI (s) (D8:40) [08:36:14:535]: Invoking remote custom action. DLL: C:WINDOWSInstallerMSI538.tmp, Entrypoint: Do_PropSetLoginModeNT
<Func Name='LaunchFunction'>
Function=Do_PropSetLoginModeNT
<Func Name='GetCAContext'>
<EndFunc Name='GetCAContext' Return='T' GetLastError='0'>
Doing Action: Do_PropSetLoginModeNT
PerfTime Start: Do_PropSetLoginModeNT : Thu May 01 08:36:14 2008
<Func Name='Do_PropSetLoginModeNT'>
Switching server to NT integrated security
<EndFunc Name='Do_PropSetLoginModeNT' Return='0' GetLastError='0'>
PerfTime Stop: Do_PropSetLoginModeNT : Thu May 01 08:36:14 2008
MSI (s) (D8:EC) [08:36:14:566]: Executing op: ActionStart(Name=Do_HttpServiceSecurity.D20239D7_E87C_40C9_9837_E70B8D4882C2,Description=Updating security settings on HTTP services,)
<EndFunc Name='LaunchFunction' Return='0' GetLastError='0'>
MSI (s) (D8:EC) [08:36:14:566]: Executing op: CustomActionSchedule(Action=Do_HttpServiceSecurity.D20239D7_E87C_40C9_9837_E70B8D4882C2,ActionType=1025,Source=BinaryData,Target=Do_HttpServiceSecurity,CustomActionData=100Updating security settings on HTTP services100000)
MSI (s) (D84) [08:36:14:566]: Invoking remote custom action. DLL: C:WINDOWSInstallerMSI539.tmp, Entrypoint: Do_HttpServiceSecurity
<Func Name='LaunchFunction'>
Function=Do_HttpServiceSecurity
<Func Name='GetCAContext'>
<EndFunc Name='GetCAContext' Return='T' GetLastError='0'>
Doing Action: Do_HttpServiceSecurity
PerfTime Start: Do_HttpServiceSecurity : Thu May 01 08:36:14 2008
<Func Name='Do_HttpServiceSecurity'>
Error updating HTTPFilter service security (5)
<EndFunc Name='Do_HttpServiceSecurity' Return='1603' GetLastError='0'>
PerfTime Stop: Do_HttpServiceSecurity : Thu May 01 08:36:14 2008
Gathering darwin properties for failure handling.
Error Code: 1603
MSI (s) (D8!20) [08:36:14:785]: Product: Microsoft SQL Server 2005 Express Edition -- Error 29528. The setup has encountered an unexpected error while Updating security settings on HTTP services. The error is: Fatal error during installation.
Error 29528. The setup has encountered an unexpected error while Updating security settings on HTTP services. The error is: Fatal error during installation.
<Failure Type='Fatal' Error='1603'>
<EndFunc Name='LaunchFunction' Return='1603' GetLastError='0'>
MSI (s) (D8:EC) [08:36:14:800]: User policy value 'DisableRollback' is 0
MSI (s) (D8:EC) [08:36:14:800]: Machine policy value 'DisableRollback' is 0
Action ended 8:36:14: InstallFinalize. Return value 3.
Snippet 2:
<Func Name='LaunchFunction'>
Function=Set_CommitFlag
<Func Name='GetCAContext'>
<EndFunc Name='GetCAContext' Return='F' GetLastError='0'>
Doing Action: Set_CommitFlag
PerfTime Start: Set_CommitFlag : Thu May 01 08:36:22 2008
<Func Name='Set_CommitFlag'>
Set_CommitFlag called successfully.Rollbacked
<EndFunc Name='Set_CommitFlag' Return='0' GetLastError='0'>
PerfTime Stop: Set_CommitFlag : Thu May 01 08:36:22 2008
<EndFunc Name='LaunchFunction' Return='0' GetLastError='0'>
MSI (s) (D8:EC) [08:36:22:988]: Executing op: ActionStart(Name=RollbackSupportFiles.D20239D7_E87C_40C9_9837_E70B8D4882C2,Description=Removing temporary files,)
MSI (s) (D8:EC) [08:36:22:988]: Executing op: CustomActionRollback(Action=RollbackSupportFiles.D20239D7_E87C_40C9_9837_E70B8D4882C2,ActionType=1281,Source=BinaryData,Target=RollbackSupportFiles,)
MSI (s) (D8:7C) [08:36:22:988]: Invoking remote custom action. DLL: C:WINDOWSInstallerMSI54B.tmp, Entrypoint: RollbackSupportFiles
MSI (s) (D8:EC) [08:36:23:004]: Executing op: End(Checksum=0,ProgressTotalHDWord=0,ProgressTotalLDWord=0)
MSI (s) (D8:EC) [08:36:23:004]: Error in rollback skipped. Return: 5
MSI (s) (D8:EC) [08:36:23:004]: Entering MsiProvideAssembly. AssemblyName: Microsoft.AnalysisServices.AdomdClient,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.2047.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:004]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:019]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:019]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.Instapi,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:019]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:019]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:019]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.SqlTDiagM,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:019]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:035]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:035]: Entering MsiProvideAssembly. AssemblyName: MSClusterLib,Version="1.0.0.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="1.0.0.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:035]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:050]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:050]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.MgdSqlDumper,Version="9.0.242.0",Culture="neutral",processorArchitecture="x86",PublicKeyToken="89845dcd8080cc91",FileVersion="2005.90.1399.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:050]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:050]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:050]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.Rmo,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.2047.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:050]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:066]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:066]: Entering MsiProvideAssembly. AssemblyName: Microsoft.AnalysisServices.DeploymentEngine,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:066]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:082]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:082]: Entering MsiProvideAssembly. AssemblyName: Microsoft.AnalysisServices,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.2047.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:082]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:082]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:082]: Entering MsiProvideAssembly. AssemblyName: Microsoft.DataWarehouse.Interfaces,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.2047.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:082]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:097]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:097]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.RegSvrEnum,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.2047.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:097]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:113]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:113]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.BatchParser,Version="9.0.242.0",Culture="neutral",processorArchitecture="x86",PublicKeyToken="89845dcd8080cc91",FileVersion="2005.90.2047.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:113]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:113]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:113]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.ServiceBrokerEnum,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.2047.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:113]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:129]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:129]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.WmiEnum,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.2047.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:129]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:144]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:144]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.ConnectionInfo,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:144]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:160]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:160]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.SqlEnum,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.2047.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:160]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:207]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:207]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.SmoEnum,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.2047.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:207]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:207]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:207]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.SString,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:207]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:222]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:222]: Entering MsiProvideAssembly. AssemblyName: Microsoft.SqlServer.Smo,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.2047.0", AppContext: , InstallMode: -4
MSI (s) (D8:EC) [08:36:23:222]: Pathbuf: 0, pcchPathBuf: 0
MSI (s) (D8:EC) [08:36:23:238]: MsiProvideAssembly is returning: 1607
MSI (s) (D8:EC) [08:36:23:238]: No System Restore sequence number for this installation.
MSI (s) (D8:EC) [08:36:23:238]: Unlocking Server
MSI (s) (D8:EC) [08:36:23:238]: PROPERTY CHANGE: Deleting UpdateStarted property. Its current value is '1'.
Action ended 8:36:23: INSTALL. Return value 3.
last few lines of log:
Property(S): RSVirtualDirectoryManager = Reports$OFFICESERVERS
Property(S): SOURCEDIR = d:a1847ef4f3beaf9c2353Setup
Property(S): SourcedirProduct = {2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}
Property(S): InstallNgenTicks = 110000
Property(S): SQLBROWSERACCOUNT = NT AUTHORITYNETWORK SERVICE
Property(S): SQLBROWSERSCMACCOUNT = NT AUTHORITYNetworkService
Property(S): SQLSCMACCOUNT = NT AUTHORITYNetworkService
Property(S): DebugClsid.CC1A8C58_27D1_4D38_BF1B_C0A5CBB90616 = {B266876E-56D9-493C-9322-0C01155F1C52}
Property(S): ProductToBeRegistered = 1
MSI (s) (D8:EC) [08:36:23:441]: Note: 1: 1708
MSI (s) (D8:EC) [08:36:23:441]: Product: Microsoft SQL Server 2005 Express Edition -- Installation failed.
MSI (s) (D8:EC) [08:36:23:457]: Cleaning up uninstalled install packages, if any exist
MSI (s) (D8:EC) [08:36:23:457]: MainEngineThread is returning 1603
MSI (s) (D84) [08:36:23:566]: Destroying RemoteAPI object.
MSI (s) (D8:E0) [08:36:23:566]: Custom Action Manager thread ending.
=== Logging stopped: 5/1/2008 8:36:23 ===
MSI (c) (104) [08:36:23:597]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (104) [08:36:23:597]: MainEngineThread is returning 1603
=== Verbose logging stopped: 5/1/2008 8:36:23 ===
I'm suspecting it's a permission error, but I can't verify this. Any thoughts? Thanks in advance.
View 5 Replies
View Related
Jul 10, 2007
Hi All,
I have a application having SQL Express as database. As the application will be installed on the client system, probably a server as per the user requirements, I require that the database cannot be accessed by anyone. As we know that the mdf and ldf files can be taken away by anyone and they can get the database structure as well as the data from database.
e.g. I install this application on one server, now any technical person can easily take a backup and install it on another server or can get the script of the database even if the db owner user id and password are blocked by me.
Please suggest me how can I block such action so that the database design and data cannot be accessed by any one outside the development team. I don't want the database schema to be revelead to anyone as it can harm the products information security.
View 2 Replies
View Related
Sep 14, 2007
Could somebody explain to me how does database security in the SQL Server Express environment works? It would seem that there has to be some level of "interplay" between the user's basic level of authority in Windows security on the machine (e.g., "Adminstrator" vs. "User"), the implications that that has on their level of access to the hard drive location where the database file is stored, and how security is configured within the database engine.
View 3 Replies
View Related
Apr 8, 2008
Is there anyway to really keep replicated SQL Server 2005 Express data secure when it is on a laptop and the laptop is stolen or lost. What would prevent someone from just reinstalling SQL Server on the laptop and attaching your database, or just attaching your mdf file to their own SQL Server. Is there anyway to keep that data secure in that scenerio?
Thank you
View 3 Replies
View Related
Jan 17, 2008
I installed SQLE 2005 on vista home prem, and when I go to the studio and attempt to create a database, I get the message below. I am running under an admin account, but the system sees me as a standard user.
Do I need to re-install and tell the system to allow me to log on via. an ID/PW?
Is there a vista patch?
Should I re-install XP?
Also, not having this issue with the same SQLE version and an XP machine.
Thanks
TITLE: Microsoft SQL Server Management Studio Express------------------------------Create failed for Database 'test'. (Microsoft.SqlServer.Express.Smo)For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&ProdVer=9.00.3042.00&EvtSrc=Microsoft.SqlServer.Management.Smo.ExceptionTemplates.FailedOperationExceptionText&EvtID=Create+Database&LinkId=20476------------------------------ADDITIONAL INFORMATION:An exception occurred while executing a Transact-SQL statement or batch. (Microsoft.SqlServer.Express.ConnectionInfo)------------------------------CREATE DATABASE permission denied in database 'master'. (Microsoft SQL Server, Error: 262)For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&ProdVer=09.00.3042&EvtSrc=MSSQLServer&EvtID=262&LinkId=20476------------------------------
View 1 Replies
View Related
Dec 3, 2006
hi
i am using vc# 2005 and sql 2005 express.
my problem is does exist any way to set password on sql2005 database ?
(because i don't want to end users access to sql server's tables and datas and ...)
how to solve my problem ?
thanks
View 3 Replies
View Related
Aug 16, 2005
Does anybody know if it is possible to establish a connection to an sql express instance only with integrated security when this express instance is running on XP which is NOT part of a domain?
View 1 Replies
View Related
Nov 9, 2005
The last few lines of the log show:
View 4 Replies
View Related
Aug 30, 2006
Hi,I'm
building an asp.net website using web developer express and I have a
SQL 2005 express install on the same machine. Using windows security,
everything works fine for development.Now I need to get it working at the client site, where the web server and SQL 2005 Express are on different machines.I'd
tried using windows authentication but that didn't work, probably
wasn't doing it correctly. I'd like to try SQL Authentication, at least temporarily, since I
can replicate that on my laptop at home easily I think.I created a new SQL login but was really baffled by the screens showing roles and schemas, etc. There's so many roles to choose from and wasn't sure if this new login needed to own any schemas. I
did turn on remote connections and mixed-mode authentication, the
probably now is my asp.net membership provider login page isn't
authenticating correctly, maybe my permissions are wrong on the
aspnet_..... tables for users, roles, profiles, etc. Any advice?thanks,Bruce
View 3 Replies
View Related
Aug 28, 2007
Hi all,
I copied the following set of C# code statement from a website to learn the SqlBulkCopy instance via SQLEXPRESS-ADO.NET 2.0-Visual C# Express:
/////////////////////----Main.cs---//////////////////////
sing System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Text;
using System.Windows.Forms;
using System.Data.SqlClient;
namespace SqlBulkCopySample
{
public partial class frmMain : Form
{
public frmMain()
{
InitializeComponent();
}
private void btnStart_Click(object sender, EventArgs e)
{
String sourceConnectionString =
"Data Source=.SQLEXPRESS;Initial Catalog=Northwind;Integrated Security=True";
String destinationConnectionString =
"Data Source=.SQLEXPRESS;Initial Catalog=SqlBulkCopySample;Integrated Security=True";
DataTable data = SelectDataFromSource(sourceConnectionString);
CopyDataToDestination(destinationConnectionString, data);
}
private DataTable SelectDataFromSource(String connectionString)
{
DataTable data = new DataTable();
using (SqlConnection connection = new SqlConnection(connectionString))
{
SqlCommand command = new SqlCommand("SelectOrders", connection);
command.CommandType = CommandType.StoredProcedure;
connection.Open();
SqlDataReader reader = command.ExecuteReader();
data.Load(reader);
}
return data;
}
private void CopyDataToDestination(String connectionString, DataTable table)
{
SqlBulkCopyColumnMapping mapping1 =
new SqlBulkCopyColumnMapping("OrderID", "ID");
SqlBulkCopyColumnMapping mapping2 =
new SqlBulkCopyColumnMapping("ShipName", "Name");
SqlBulkCopyColumnMapping mapping3 =
new SqlBulkCopyColumnMapping("ShipAddress", "Address");
SqlBulkCopyColumnMapping mapping4 =
new SqlBulkCopyColumnMapping("ShipCity", "City");
SqlBulkCopy bulkCopy = new SqlBulkCopy(connectionString);
bulkCopy.BatchSize = 100;
bulkCopy.BulkCopyTimeout = 5;
bulkCopy.ColumnMappings.Add(mapping1);
bulkCopy.ColumnMappings.Add(mapping2);
bulkCopy.ColumnMappings.Add(mapping3);
bulkCopy.ColumnMappings.Add(mapping4);
bulkCopy.DestinationTableName = "DataMySqlBC1";
bulkCopy.SqlRowsCopied +=
new SqlRowsCopiedEventHandler(bulkCopy_SqlRowsCopied);
bulkCopy.NotifyAfter = 200;
bulkCopy.WriteToServer(table);
}
void bulkCopy_SqlRowsCopied(object sender, SqlRowsCopiedEventArgs e)
{
MessageBox.Show
(String.Format("{0} Rows have been copied.", e.RowsCopied.ToString()));
}
}
}
//////////////////////////////////////////////////////////////////////////////////////////////////////////////
I executed the above project in my local PC (with Adiministrator previlidge/use) that is in our LAN/Network system and I got an error: SecurityException was unhandled - Request for permission of type 'System.Data.SqlClient.SqlClientPermission, System.Data, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'failed. First, I have a question: is this problem related to the remote connection to SQLEXPRESS? Second, I do not know how to solve this problem. Please help and answer my first question and tell me how to solve this problem.
Thanks in advance,
Scott Chang
View 1 Replies
View Related
Jun 19, 2000
Hi:
Can anybody tell me the advantage and disadvantage to use NT security for SQL Server 7.0? For a corporation with 400 users, what is your recommendation for the SQL Server security management. Thanks.
Joan
View 1 Replies
View Related
Aug 31, 2006
What is the Difference between the SQL Server Express Bundled with C#/VB VS the downloadable SQL Server Express SP1 with advanced Services?
I installed C# with SQL Server Express, however I wanted to add the Full Text Searching and the SQL Server Management Studio Express, so I downloaded and installed the SQL Server 2005 Express Edition with Advanced Services SP1. When I installed it over top of my current installation, it complained of version mismatching, and then C# failed to recognize that I had SQL 2005 Express installed at all.
What I'd like to know is, which version is more current (they have to be different, they had different version numbers, one was 9.xx.xxxx the other was 2005.9.xx.xxxx) The one bundled with C#, or the SP1 downloadable one.
Firstly, I want to be up todate as far as security patches, and Secondly, how do I add the full text searching and SSMSE to the one bundled with C# without breaking it.
View 4 Replies
View Related
Jan 22, 2007
HI
Q1: Does Sql Server 2005 Express support Web/Internet to other SQL Server 2005 Express Clients or does it have to Synch across the internet to a fully installed setup SQL Server 2005 with IIS?
Q2: Does SQL Server 2005 Express support Direct Replication between other SQL Server 2005 Express clients?
Regards
View 5 Replies
View Related
Jun 7, 2007
Hi all,
I have installed SQL server 2005 express edition with SQL server Management studio express (SSMSE).
I have installed also SQLce and I would know how I can manage sql compact edition databases (.ldf) with sql SSMSE, if it is possible!
I would be grateful if you could explain it trought a detailed guide (I am a beginner user of sql server tools) or trought a link to useful sites.
I'm Looking forward for your reply and still trying...
Alessandro
View 1 Replies
View Related
Dec 4, 2014
I use from sql server 2008. and c#
what is the best connectionstring?
I don't know if i use Persist Security Info and Integrated Security or not?
And if yes then their value must be true or false?
View 1 Replies
View Related
Oct 14, 2005
Hello there I have trying to figure out for days how to enable FullTrust for my Reporting Services security extension.
View 9 Replies
View Related
Jul 31, 2007
Hi,
I have posted this issue for a week, haven't got any reply yet, I posted it again and desperately need your help.
The article http://msdn2.microsoft.com/en-us/library/ms365343.aspx says:
Model Item Security can be set for differnt security filters, but when I use SQL Server Management Studio to set Model Item Security, it seems "Permissions" property surpass "Model Item Security" property. -- My report server is using Custom Authentication.
For example, in "Permissions" property of the model, if I checked "Use these roles for each group or user account" without setting any user or group, no matter what users I added to "Model Item Security" with "Secure individual model items independently for this model" checked, NO one user can see the model on report manager and report builder;
in above situation, if I added "user1" and gave role such as "Browser" role to "user1" in "Permissions" property, if I checked "Secure individual model items independently for this model" in "Model Item Security" property, even I did NOT grant "user1" to root model and any entities under the model, the "user1" is able to access the model and all entities in report builder.
My question is on the same report model, how to set "AdminFilter" (empty security filter) for administrator permissions and set "GeneralFilter" (filtered on UserID) for general user based on their UserID?
The article also says:
"Security filters are always applied, even for users who have Content Manager or Administrator permissions to the model. To allow administrators or other users to see all rows of an entity on which row-level security is defined, you can create an empty security filter (which always returns True) and then use the filter to grant those users access to all the rows."
So I defined 2 filters "GeneralFilter" and "AdminFilter" for "Staff" entity for my report model "SSRSModel", I expect after I deployed the report model, the administrator users use report builder to build reports with all rows available, and the non-admin users can only see rows based on their UserID.
I can only get one result at a time but not both:
either the rows are filtered or not filtered at all, no matter how I set the "SecurityFilter" for the entity: I tried setting both "AdminFilter" and "GeneralFilter" for SecurityFilter at the same time, combination of "DefaultSecurityFilter" and "SecurityFilter", or one at a time.
Your help is highly appreciated!
Desperate developer
View 1 Replies
View Related
Nov 12, 2007
Hi all,
I downloaded the SSEUtilSetup.EXE and extracted the SSEUtil.exe to a folder of C:drive of my PC that is Windows XP Pro. I plan to learn the CLR programming via user-instance of SQL Server Express. I need to have SQL Server Express Utility installed. Please help and tell me how I can install SSEUtil.exe in my PC and how I use it to interact with SQL Server Express.
Thanks,
Scott Chang
View 2 Replies
View Related
Apr 26, 2007
hi i want to know what is the differance between
Persist Security Info=False;Integrated Security=Yes;
View 1 Replies
View Related
Oct 18, 2015
Is there any possibility to schedule SQL job execution as Windows Security Group? I need to run powershell script through SQL job with one of this group member's permissions.
View 4 Replies
View Related
Jul 6, 2007
I have Sql Server Express installed on Vista (service pack 2)
I have Visual Studio 2005 with an application that I'm trying to access it with within a WCF service.
The login ID of the service is added to the database.
The database has remote access turned on.
The ID is granted access to all databases within the server.
The thread is being set with WindowsProvider and the services set their thread to WindowsProvider.
The dataserver is set with using Windows Authentication for security.
When I open my connection to the database, though, it reports the typically useless message that the connection is not allowed and that the server may not allow remote connections.
How to I get past this? I've done everything right.
View 1 Replies
View Related
Jun 18, 2007
I want to use an Active Directory security group that is a Distribution List for a new role assignment for an existing report. Can someone tell me if this is possible? I get an error each time I try:
The user or group name <DLName> is not recognized. (rsUnknownUserName)"
View 1 Replies
View Related
Feb 20, 2006
1, I have installed VWD express,sql server 2005 express.I also install management studio and adventureswork db.In the management studio I can able to connect and view adventurework db.But I can't manage to make a connection string to my db server when connecting to management studio server name is "KAMRANSHAHIDSQLEXPRESS".I wants a connection string with respect to this server.2,Is there new database for pubs and northwind for sql server 2005.Or they are of old sql server 2000.I have installed sample databases but can't find script for pubs and northwind nor it install automatically.I wan't to use tutorial's sample.
View 1 Replies
View Related
Mar 14, 2007
Hi
I'm a newbie and I have a problem that i can't solve despite sitting here all day trying to wortk it out.
I have installed SQL Server Express 2005 along with the associated toolkit. Previous to that i installed MS Visulal studio 2005, .NET 2.0 and MSDN.
The problemn is that it appears despite installing everything i don't have SQLExpress services running on my PC. I have admin rights, it installed okay but there is nothing to connect to.
When i run "sqlcmd.exe -s (local)SQLExpress -E" from the command prompt i get the following message:
HResult 0x2, Level 16, State 1
Named Pipes Provider: Could not open a connection to SQL Server [2].
Sqlcmd: Error: Microsoft SQL Native Client : An error has occurred while establi
shing a connection to the server. When connecting to SQL Server 2005, this failu
re may be caused by the fact that under the default settings SQL Server does not
allow remote connections..
Sqlcmd: Error: Microsoft SQL Native Client : Login timeout expired.
When i run SQL Server Configuration there is no "SQLExpress" service present under "SQL Server 2005 Servcies" in SQL Server Configuration dialog; just a message saying:
"there are no items to show in this view"
When i run Surface Area Configuration i get the following message:
TITLE: Surface Area Configuration
------------------------------
No SQL Server 2005 components were found on the specified computer. Either no components are installed, or you are not an administrator on this computer. (SQLSAC)
------------------------------
BUTTONS:
OK
------------------------------
If you can shed any light on this id be extreamly grateful as i'd been here for hours before stumbling across the toolkit (why this wasn't bundled i don't know) only to realise once i had it that the SQLExpress service isn't running :(
Cheers,
Nick.
View 1 Replies
View Related
Apr 16, 2007
When I downloaded/started using Visual Web Developer I was under the impression that I needed to install SQL Server Management Studio Express in order to create/manage databases, and to provide the engine to access the data.
Since then I have found tutorials and have successfully created/used databases solely from within Visual Web Developer. I'm assuming that Visual Web Developer includes a database engine, much like the webserver that is included. (This is an awesome thing).
When I tried to upload my web application with database to my production server, the database would not work, it started working after I installed SQL Server Management Studio Express on the server.
Is it my understanding that you need SQL Server Management Studio Express if you do not have Visual Web Developer Express installed in order to provide the data access engine?
Also, I am unable to "attach" my Visual Web Developer Express created database to SQL Server Management Studio Express. Are there any posts that provide more information about this topic?
The only reason I'm asking is that I have extra whitespace on the end of my text fields, and I thought ANSI_PADDING was turned on. I do not see the option in Visual Web Developer Express, but have found it in SQL Server Management Studio Express.
View 14 Replies
View Related