Options

Leaving linked servers set up is a security issue

Neil DavidsonNeil Davidson Posts: 281
Laurence,

The latest version of SQL Data Compare (3.00) doesn't use linked servers.
You can find out more information about this from:

http://www.red-gate.com/sql/version30x_ ... ompare.htm

Yours,

Neil Davidson

"Laurence Neville" <laurenceneville@hotmail.com> wrote in message
news:tuMG9fdrDHA.1516@server53...
> I have been looking at how SQL Data Compare (and SQL Compare?) use linked
> servers to compare two databases. When I look at the Linked Servers folder
> through Enterprise Manager I see that the linked server remains after SQL
> Data Compare is closed and the security details I supplied are encoded in
> the linked server's security properties. This is a big security hole -
after
> I as a sysadmin compare two databases any user on the first server has
> access to the second with sysadmin credentials through the linked server!
>
> Can this be prevented?
>
> Thanks
>
>
- Neil Davidson
Red Gate Software Ltd

Comments

  • Options
    Laurence,

    The latest version of SQL Data Compare (3.00) doesn't use linked servers.
    You can find out more information about this from:

    http://www.red-gate.com/sql/version30x_ ... ompare.htm

    Yours,

    Neil Davidson

    "Laurence Neville" <laurenceneville@hotmail.com> wrote in message
    news:tuMG9fdrDHA.1516@server53...
    > I have been looking at how SQL Data Compare (and SQL Compare?) use linked
    > servers to compare two databases. When I look at the Linked Servers folder
    > through Enterprise Manager I see that the linked server remains after SQL
    > Data Compare is closed and the security details I supplied are encoded in
    > the linked server's security properties. This is a big security hole -
    after
    > I as a sysadmin compare two databases any user on the first server has
    > access to the second with sysadmin credentials through the linked server!
    >
    > Can this be prevented?
    >
    > Thanks
    >
    >
    - Neil Davidson
    Red Gate Software Ltd
This discussion has been closed.