Has your server been patched against the slammer worm?

See http://www.microsoft.com/sql for more info

Did you run the DTS job from the server itself? (as DTS is a client side app)

Does the query run from SQLPlus (ie oracle itself)

You can replicate from SQL Server to Oracle,

as for the other way round I think you may need to purchase the oracle gateway software.

You will need to use 4 part naming

eg

select * from ORACLEDATABASE..<Tableowner>.<Tablename>

Also I think everything needs to be in uppercase

Someone else suggested a different workaround to me a while back, which may be worth testing.

http://www.sqlservercentral.com/forum/topic.asp?TOPIC_ID=7194&FORUM_ID=5&CAT_ID=1&Topic_Title=xp%5Fsendmail+processdump+%28sev+19%29&Forum_Title=Administration

Also take a look at the two papers on injection at

http://www.nextgenss.com/research/papers.html

http://www.sqlsecurity.com is also a very good resource.

(Reason: Login failed for user (null). Reason: not associated with a trusted SQL Server conenction.")

This error id shows that the account information was not passed to sql. for instance...

I agree with David re the Uk, but in saying that they are UK jobs advertised at the 40K/50K range and above, espically around London

You could move that table into its own filegroup, then run filegroup backups.

You will need to test your backup/restore process fully to ensure you can get your database back if...

You may be able to grant them the db_ddladmin

role.

From BOL

db_ddladmin 'Adds, modifies, or drops objects in the database (runs all DDLs).'.

They may still have to prefix there objects...

Are you running the DTS from your own PC?

Remember DTS is client side software, hence it runs from the PC you run it on. If this is the case...

At least when it is the script part that falls over you can view the log file and the script. Then run it bit by bit in QA and manually...

Developers need a valid account to connect to the test/production servers. Hence restricting access to accounts may help.

You also may want to check the application, to ensure you can't inject sql.

I tested a HR package last year where they had two components the COM+ front end and...