Something along these lines is what we use... if you have a DBA handy so much the better! This is the SQL statement we use for our ASP.Net page, but it should be similiar for a straight SQL query.
===
"UPDATE [R_Inventory] SET [DeviceKey]=@DeviceKey,[DeviceName]=@DeviceName,[IPAddress]=@IPAddress,[DeviceStatus]=@DeviceStatus,[ProductType]=@ProductType,[ProductName]=@ProductName,[SerialNumber]=@SerialNumber,[AssetTag]=@AssetTag,[MemorySize]=@MemorySize,[ROMVersion]=@ROMVersion,[OS]=@OS,[Location]=@Location,[DeviceOwner]=@DeviceOwner,[IPLongValue]=@IPLongValue WHERE [DeviceKey]=@DeviceKey" SelectCommand="SELECT * FROM [R_Inventory]" ConnectionString="server='serverx'; user id='xx'; password='xxxx'; Database='INSIGHT_DB_V32'"