Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Administration (2000)
 securing sql server

Author  Topic 

jbezanson
Starting Member

35 Posts

Posted - 2007-09-27 : 13:42:51
I have what some might consider a dumb question but I really don't know the answer.

Until recently all our .Net work ahs been hosted on our internal network and the Sql Server (2000) was not open to the outside. However recently our company is looking at hosting other outside SQL Server applications that require users across the country to connect directly to our SQL Server (not through an ASP.Net app).

The concerns we have is that ASP.Net runs on the NETWORK SERVICE account. If a user outside our network were to know the IP and name of onw of our databases could they connect with ASP.Net using a Trusted Connection or do trusted connections only work if the application is hosted on the same network?

One of the applications we are looking at hosting is showing a list of all databases on our server (I did find the article on modifying sp_MSdbuseraccess but that didn't seem to work) so if someone got a hold of this list would they be able to connect?

Thanks


Justin Bezanson
www.justinbezanson.com
www.geekdaily.net - web development and technology blog and news
www.offsidegames.com - free online flash games
www.thrufare.com - free proxy website

rmiao
Master Smack Fu Yak Hacker

7266 Posts

Posted - 2007-09-28 : 00:57:55
To use trusted connection, user has to logon windows domain that sql server belongs to or trusted first.
Go to Top of Page
   

- Advertisement -