asp.net sql server security

  • hi,

    I would like to implement MAX security for my sql server 2000.

    Ideally, I would like to secure

    1) the asp.net account

    2) an admin account.(so that I can create stored procs thru EM interface, and query Analyzer etc)

    I want account 2 to be the only account that has permissions to open up EM.

    The only access that I want my users to have is thru the web pages that use the asp.net account, ie the permissions that I should assign to my asp.net account

    Currently, on my machine, MSSQLSERVER starts as "Local System Account" I believe that this is a NO-No as well.

    Can anyone advise?

    cheers,

    yogi

  • I would like to know this as well as well. Do you not allow regular users to create stored procs? I thought this was a standard practice?

  • howdy, i simply want to be the only one who has access to EM.

    the users should only have datbase access thru the asp.net pages, which in turn will call stored procs.

    maybe this will help:

    http://www.microsoft.com/usa/webcasts/ondemand/1765.asp

    unfortunately, I can't get the required software to work..:-(]

    has anyone else got any ideas?

    cheers,

    yogi

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply