This is being executed by SQL Server, so it's going to use the SQL Server service account (not the Agent).

To use a different account, the easiest way to do...

Use procmon (http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx) to see what account is hitting that file. It'll need to run from the system where the Access database is. My guess is it's probably...

I wasn't speaking of SQL Server logins. If you go back up the thread, I was talking two Windows logins in different domains (in different forests) where there is no...

Check what David said.

A member of db_owner, except for dbo, will honor a DENY on a table. Members of the sysadmin role map in as dbo, which effectively ignores the...

Exactly.

Multi-tasking is bad! 🙂

The two accounts is a bit different than maintaining a separate admin account in development.

The main reason for the two accounts is to help reduce the risk of drive-by...

This is why I love Mladen's tool, especially if your servers follow a naming convention to define the environments. It allows you to build RegEx to color code the instances....

A great product for ensuring the proper color coding based on server name, for instance, is Mladen's SSMS Tools Pack. You can set the color and how big the visual...

If you allow access to the file system, realize that the SSIS packages will execute from wherever the dtexec command is given. So if it's given from the user's workstation,...

I believe you can put in a server level trigger, but this should not be relied upon.

By the way, situations like this is one reason some folks put development...

s.youngman (7/25/2013)

---

WayneS (7/25/2013)

---

Has anyone tried:

[System.Data.Sql.SqlDataSourceEnumerator]::Instance.GetDataSources()

It's description is: "Provides a mechanism for enumerating all available instances of SQL Server within the local network."

So what I wonder is:

Does it only...

The concern is valid. It's a typical technique in spear phishing attacks.

By being stored, it won't affect SQL Server. SQL Server is not opening the document. I know that's...

If there are other DBs which are legitimately accessible by users, you can't.

If there aren't, and if you can authorization to modify your firewall policy on the server, then...

If they're in a Windows security group, you can add the group as a login and deny permission to connect to the SQL Server.

However, this is usually seen as a...