Deny windows account user to register sql server in enterprise manager

Question

Deny windows account user to register sql server in enterprise manager

Lester Policarpio

SSCertifiable

Points: 7109
More actions
September 28, 2011 at 7:43 pm

#98142

I was task to create a windows account user in sql 2000 and was asked to just allow the user to connect via query analyzer but not Enterprise Manager is this possible?
"-=Still Learning=-"
Lester Policarpio

Viewing 8 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic. Login to reply

Jack Corbett SSC Guru Points: 184394 More actions · Answer 1

No. If an account is granted login rights to a SQL Server you can't restrict what application they use to connect. At least not within standard SQL Server security. There might be some way to hack your way to this.

Jack Corbett
Consultant - Straight Path Solutions
Check out these links on how to get faster and more accurate answers:
Forum Etiquette: How to post data/code on a forum to get the best help
Need an Answer? Actually, No ... You Need a Question

SQLRNNR SSC Guru Points: 281334 More actions · Answer 2

Jack Corbett (9/29/2011)
No. If an account is granted login rights to a SQL Server you can't restrict what application they use to connect. At least not within standard SQL Server security. There might be some way to hack your way to this.

May be a way to do that - but I don't think it would be worth it.

Jason...AKA CirqueDeSQLeil
_______________________________________________
I have given a name to my pain...MCM SQL Server, MVP
SQL RNNR
Posting Performance Based Questions - Gail Shaw[/url]
Learn Extended Events

Jack Corbett SSC Guru Points: 184394 More actions · Answer 3

SQLRNNR (9/29/2011)
Jack Corbett (9/29/2011)
No. If an account is granted login rights to a SQL Server you can't restrict what application they use to connect. At least not within standard SQL Server security. There might be some way to hack your way to this.
May be a way to do that - but I don't think it would be worth it.

Yeah, that's kind of what I meant. Even when you get to 2005+ you can't really do it well.

Jack Corbett
Consultant - Straight Path Solutions
Check out these links on how to get faster and more accurate answers:
Forum Etiquette: How to post data/code on a forum to get the best help
Need an Answer? Actually, No ... You Need a Question

Lowell SSC Guru Points: 323518 More actions · Answer 4

does SQL 2000 support logon triggers? i think that's only 2005 and above, rioght?

Lowell

--help us help you! If you post a question, make sure you include a CREATE TABLE... statement and INSERT INTO... statement into that table to give the volunteers here representative data. with your description of the problem, we can provide a tested, verifiable solution to your question! asking the question the right way gets you a tested answer the fastest way possible!

SQLRNNR SSC Guru Points: 281334 More actions · Answer 5

Lowell (9/29/2011)
does SQL 2000 support logon triggers? i think that's only 2005 and above, rioght?

Correct

Jason...AKA CirqueDeSQLeil
_______________________________________________
I have given a name to my pain...MCM SQL Server, MVP
SQL RNNR
Posting Performance Based Questions - Gail Shaw[/url]
Learn Extended Events

Jack Corbett SSC Guru Points: 184394 More actions · Answer 6

SQLRNNR (9/29/2011)
Lowell (9/29/2011)
does SQL 2000 support logon triggers? i think that's only 2005 and above, rioght?
Correct

Logon Triggers can be used for this if, but they may not work because the application name is passed in as a parameter to a connection string, so I can make any application say it's another application. This is one of the reasons why you need to make sure you set permissions appropriately using least privileges. Once you've let a person on your SQL Server you can't really control how they connect so you need to be sure you've locked down their account properly.

Jack Corbett
Consultant - Straight Path Solutions
Check out these links on how to get faster and more accurate answers:
Forum Etiquette: How to post data/code on a forum to get the best help
Need an Answer? Actually, No ... You Need a Question

Lester Policarpio SSCertifiable Points: 7109 More actions · Answer 7

Thanks for the replies guys the best I can do is to restrict the access of the user so that even with a successful registration in Enterprise Manager the user can do nothing in the databases

"-=Still Learning=-"

Lester Policarpio