Linked Servers - what security issues should be considered?

[stiej]

Hi,

When adding linked servers to any SQL Server, which security issues should be considered? Any?

What settings are best for adding linked servers to SQL servers, all of which are local/in-house and not live?

Thanks for any help...

 

[mrdenny]

Use the mapping from one server to another. Don't use the map everyone else using this account option. Keep permissions as tight as possible.

Denny
MCSA (2003) / MCDBA (SQL 2000)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

 

[Catadmin]

If the servers are linked, there shouldn't be a need for anyone but the server tech to connect directly to each box. Have a PC with all linked servers on EM / QA available (or a PC for each person who absolutely needs it) and give the DBA(s) who need it access to the shares where the data / log / error files are, but don't give them anything else.

As Denny said, it's all about permissions. Keep 'em tight and don't give out anything you don't have to give out.

Catadmin


Catadmin - MCDBA, MCSA
"The only stupid question is the one you *didn't* ask.