Alan Bourke <> wrote:
> Stephen the Cook wrote:
>> I'm sorry but this advise is poor for any system.  From the SQL2000
>> days and now in the more secure SQL2005 days security within the
>> domain is what you want to use.  Sure you can use straight SQL Auth,
>> but it's a RPITA when you ever change servers.  B
> 
> If people were changing servers the whole time it would be, but in
> real terms how likely is that? 

Changing servers?  Depends on the shop.  Getting more servers, buying other
companies that suddenly come under your control?  Priceless
 
> If you do it properly you have one encrypted connection string in a
> config file that you need to change. 

And one for reporting in a read only manner.  A secret backup that is there
in case someone goofs up the sa account.  I could go on.  

Stephen Russell
DBA / .Net Developer

Memphis TN 38115
901.246-0159

"A good way to judge people is by observing how they treat those who
    can do them absolutely no good." ---Unknown

http://spaces.msn.com/members/srussell/

-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.446 / Virus Database: 268.18.4/703 - Release Date: 2/26/2007
2:56 PM
 



_______________________________________________
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.

Reply via email to