Help SQL 2K Security :-) DBA's

Hello everyone,
Here goes another wired on... Currently I have a local test SQL server setup
on my PC. I need to give access to another (entry, verrrrrryyyy entry level)
programmer access to my local server (READ ONLY). but here goes the problem,
I discovered that the employee replicated my db and left it open causing
security issues, since the data contains lots of sensitive data. (credit
cards, soc sec, emp names, etc). Is theirs a way in SQL server to assign
field level security? for example : I want to give him access to employee
names in the employee db, but I don't want him to be able to view employees
socials? the same with customers and credit card information or to restrict
him from exporting any data/scripts. any ideas'
Thanks in advance
AlexThank u!!!!
"alex" <hjhjjhhj@.ghghhg.com> wrote in message
news:%23LWLPaEWDHA.1480@.tk2msftngp13.phx.gbl...
> Hello everyone,
> Here goes another wired on... Currently I have a local test SQL server
setup
> on my PC. I need to give access to another (entry, verrrrrryyyy entry
level)
> programmer access to my local server (READ ONLY). but here goes the
problem,
> I discovered that the employee replicated my db and left it open causing
> security issues, since the data contains lots of sensitive data. (credit
> cards, soc sec, emp names, etc). Is theirs a way in SQL server to assign
> field level security? for example : I want to give him access to employee
> names in the employee db, but I don't want him to be able to view
employees
> socials? the same with customers and credit card information or to
restrict
> him from exporting any data/scripts. any ideas'
> Thanks in advance
> Alex
>|||"alex" <hjhjjhhj@.ghghhg.com> wrote in message
news:eVCvrHFWDHA.2008@.TK2MSFTNGP11.phx.gbl...
> Thank u!!!!
>
> "alex" <hjhjjhhj@.ghghhg.com> wrote in message
> news:%23LWLPaEWDHA.1480@.tk2msftngp13.phx.gbl...
> > Hello everyone,
> >
> > Here goes another wired on... Currently I have a local test SQL server
> setup
> > on my PC. I need to give access to another (entry, verrrrrryyyy entry
> level)
> > programmer access to my local server (READ ONLY). but here goes the
> problem,
> > I discovered that the employee replicated my db and left it open causing
> > security issues, since the data contains lots of sensitive data. (credit
> > cards, soc sec, emp names, etc). Is theirs a way in SQL server to assign
> > field level security? for example : I want to give him access to
employee
> > names in the employee db, but I don't want him to be able to view
> employees
> > socials? the same with customers and credit card information or to
> restrict
> > him from exporting any data/scripts. any ideas'
> >
> > Thanks in advance
> >
> > Alex
> >
> >
I have to add one more note to this even though you've gotten your answer
and probably moved on. You said you have a "local test SQL server" setup.
You should never have legitimate, sensitive customer/employee information in
a test database. There's just no need for it, and you're taking a huge risk
of that information falling into the wrong hands. Scramble or remove the
data in the sensitive columns immediately.
If you need a legitimate CCN or SSN for testing (such as validation
routines) then pull out your wallet and use your own. Risking compromise of
a customer or employee's personal information is just insane.
Ryan LaNeve

Help SP3a installation error

I have just installed a new Win2000 server, and loaded
SQL2000 Standard Edition. As soon as I try to install sp3a
I get the following error:
"Setup Initialization error.
Access is denied.
Source: D:\installs\SP3a-SQL2000\x86\setup\sqlspre.ini
Target: ...path\temp\setupsql.ini"
I am running the installation as administrator.| I have just installed a new Win2000 server, and loaded
| SQL2000 Standard Edition. As soon as I try to install sp3a
| I get the following error:
| "Setup Initialization error.
| Access is denied.
| Source: D:\installs\SP3a-SQL2000\x86\setup\sqlspre.ini
| Target: ...path\temp\setupsql.ini"
|
| I am running the installation as administrator.
--
Hi Sean,
Check c:\winnt\temp folder and see if setupsql.ini already exists. If it
does,
delete it. This should allow setupsql to complete successfully.
Hope this helps,
--
Eric Cárdenas
SQL Server support

Help setting up SQL2000

I am assigned to setup a small (less than 15 PC) network, accessing a
database server(SQL2000). I am wondering if I can use XP Home (which
we already have)for the clients and setting them all (including the
server -WS2003-) as workgroup? Or do I need a domain to setup the
connection to the database server? In that case we will have to
upgrade to Pro.

ThanksHi

I would go for the domain as you are at a level where it could well help for
administrative and other tasks. It will also be more secure. This is also
better as you already have a server! Even if you didn't go this route you
can access the server (at worse case by IP address, assuming the firewalls
are not blocking the ports!!!) and SQL authentication.

You will have to check the licencing to make sure that you have the right
CALs.

John

"lankids" <lankids@.brandalls.net> wrote in message
news:191285ee.0405280538.1b29cd43@.posting.google.c om...
> I am assigned to setup a small (less than 15 PC) network, accessing a
> database server(SQL2000). I am wondering if I can use XP Home (which
> we already have)for the clients and setting them all (including the
> server -WS2003-) as workgroup? Or do I need a domain to setup the
> connection to the database server? In that case we will have to
> upgrade to Pro.
> Thanks

Help setting up replication on remote IIS

Hello,

I am trying to setup merge replication for a sqlmobile database. I was able to set it up on a test environment which the sql instance and the iis were on the same box. I am trying now to go live. Our sql instance is on another box than the iis. I am now getting a 404 error when trying to test in the url https://www.domain.com/sqlmobile/sqlcesa30.dll?diag Is there a walk through for iis running on a different box, or does someone know of a solution?

HTTP Error 404 - File or directory not found.
Internet Information Services (IIS)

Hi John
questions:
-what do you understand under a "box"?
-can you open the https://www.domain.com/sqlmobile/sqlcesa30.dll?diag site on the server where you are running the IIS? with the ipAdress of the server instead of the www.domain.com
-if so, can you access it from another computer in the network?
you can't synchronize until you can find this dialog from your mobile browser.
-have you updatet the Client Agent (sqlcesa30.dll) with the WebSynchronisation Wizard accordning to the new configuration?

- as you probably know, you are connecting with the anonymous user IUSR_servername of the SQL Server from the mobile device to the webserver, so on the IIS-Server you have to know this user an give him the needed accessrights

It seems to me that there is a problem with the configuration or the access rights

Greets Florian
|||

there are only two big "gotchas" with setting up replication with a separate IIS and SQL Server machine.

1. the account you plan to use that will provide credentials between the ISAPI dll (sqcesa30.dll) and the distributor must be known to both machines. If you were using the IIS Anonymous user's credentials (IUSR_{your machine name}), this will no longer work, because the distributor has no knowledge of this account when running on a separate machine. if both machines are on a domain, instead of IUSR_, use a domain account that it known to both IIS and SQL Server machines and grant it permissions on the IIS Virtual Directory, the publication, and the published articles themselves.

2. you must install the SQL Mobile server tools on both the IIS and SQL Server machine. use the SQL Server 2005 setup disc on the IIS machine, do a custom install, and select only the server tools for SQL Mobile.

Darren

Help setting up Peer-to-peer replication for approximately 500 db'

We are looking for a script that will setup Peer-to-peer replication for
approximately 500 databases.
Obviously the Wizard will do it, but it would be extremely time consuming.
And, after setting up the publication you would still have to setup the
Peer-to-Peer topology.
Is there a simple way script the entire process?
peer-to-peer is only really scalable to 10 or so nodes.
Hilary Cotter
Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html
Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com
"Jarek Gal" <Jarek Gal@.discussions.microsoft.com> wrote in message
news:916ACC30-728E-4AA6-9D7D-0CDA7DD50407@.microsoft.com...
> We are looking for a script that will setup Peer-to-peer replication for
> approximately 500 databases.
> Obviously the Wizard will do it, but it would be extremely time consuming.
> And, after setting up the publication you would still have to setup the
> Peer-to-Peer topology.
> Is there a simple way script the entire process?
|||We have 2 SQL servers but need to do that 500 times. So the 10 nodes is not
an issue.
"Hilary Cotter" wrote:

> peer-to-peer is only really scalable to 10 or so nodes.
> --
> Hilary Cotter
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
> Looking for a FAQ on Indexing Services/SQL FTS
> http://www.indexserverfaq.com
> "Jarek Gal" <Jarek Gal@.discussions.microsoft.com> wrote in message
> news:916ACC30-728E-4AA6-9D7D-0CDA7DD50407@.microsoft.com...
>
>
|||Once you've set it up for one node, scripting it out and amending the
scripts for each subsequent node shouldn't be too difficult:
http://www.replicationanswers.com/Script3.asp. You'll still need to get the
backup files restored on each node before commencing though.
Cheers,
Paul Ibison SQL Server MVP, www.replicationanswers.com .