Preventing Users from getting ODBC access to DB

[tonykblen]

Hi,

I would like to know what the best way would be to prevent certain users/user groups from accessing databases in SQL Server. I was thinking of deleting the odbcad32.exe file in order to prevent access, but am unsure as to whether there is a method with more granularity?

Any help on this one is greatly appreciated,

Tony.

Tony Kennedy BSc. B.I.S.,
MCSA Cand.

A good start is half the work.
Every start is difficult .
-Two Gaelic proverbs

 

[jgoodman00]

Your best way would be to restrict access on the server. Deleting files doesnt sound like a good idea...

You can use enterprise manager to assign logins...

James Goodman MCSE, MCDBA

http://www.angelfire.com/sports/f1pictures

 

[tonykblen]

Hi James,

Because we use an ERp program that uses trusted logins and windows authentication is allowed, I can't really use SQL server logins.

Do you have any other ideas?

Cheers,

Tony.

Tony Kennedy BSc. B.I.S.,
MCSA Cand.

A good start is half the work.
Every start is difficult .
-Two Gaelic proverbs

 

[SQLBill]

To access the databases they need to have a Security Login - regardless of whether you use Windows Authentication or SQL Server Authentication. Open Enterprise Manager, drill down to Security. Expand that and click on Logins. If the person or group has a login, then they can access the databases. Delete their login and they won't have access. You can also go to the Database tab and that's where you allow/deny access to individual databases.

-SQLBill

 

[jgoodman00]

To access the databases they need to have a Security Login - regardless of whether you use Windows Authentication or SQL Server Authentication. Open Enterprise Manager, drill down to Security. Expand that and click on Logins. If the person or group has a login, then they can access the databases. Delete their login and they won't have access. You can also go to the Database tab and that's where you allow/deny access to individual databases.

Cheers,

I tried posting something similar but it didnt let me...

If any of the users have admin priveleges on the server they might well have access. The solution to this is to make sure they arent.

James Goodman MCSE, MCDBA

http://www.angelfire.com/sports/f1pictures

 

[timscronin]

When not using ODBC to ATTACH, HOW DO THEY ATTACH? yOU CAN LOOK AT APPLICATION ROLES AS A POSSIBLE SOLUTION