Application security

[johndan]

We use an application that requires the user to have Read,Write,Delete and modofy writes from the OS. This opens a security problem as users can easily access the data thru explorer,run command or even another database utility.

Is it possible that when users log onto main domain that users are not authenticated to folder that holds database until they run ICA client. How could this be done?

Thanks

 

[Illuvatar]

I don't think that this is easily established. The only thing you can do is assign group rights to the folders that only contain terminal server users. This way the other 'non terminal server' users do not have the proper rights and can't do any harm. But you still have the terminal server users left. They must be aware of the danger they can do to the database. So try to place the responsibility at their hands. Also make sure you have a good backup scenario and enable logging. I do not think that there is another way.