Friday, March 9, 2012

MSDE instance being broadcast

I work in a domain environment with a couple of Enterprise Edition SQL
Servers. Using SSMS, when I go to register a new installation and I 'Browse
for more' in the dialog box, I see a whole bunch of workstations that I know
are set up with MSDE.
How do I keep these machines from broadcasting their presence to the domain?
All these MSDE installs are strictly for local machine use only and none of
them should allow external connections. The fact that they are broadcasting
their presence (they don't have SQL Browser because they are only MSDE) I se
e
as a security risk. How can I stop this?
Any suggestions.
Thanks
--
Todd ChittendenYes, it is a security risk. It's been some time since I worked with MSDE,
but I would investigate disabling the ports and protocols--much as the
surface area configuration tool does for SQL Express 2005. This can be done
if the applications are coded to use the shared memory provider (and bypass
the network) and are not (in fact) shared on the net.
hth
____________________________________
William (Bill) Vaughn
Author, Mentor, Consultant
Microsoft MVP
INETA Speaker
www.betav.com/blog/billva
www.betav.com
Please reply only to the newsgroup so that others can benefit.
This posting is provided "AS IS" with no warranties, and confers no rights.
__________________________________
Visit www.hitchhikerguides.net to get more information on my latest book:
Hitchhiker's Guide to Visual Studio and SQL Server (7th Edition)
and Hitchhiker's Guide to SQL Server 2005 Compact Edition (EBook)
----
---
"Todd C" <ToddC@.discussions.microsoft.com> wrote in message
news:E302F2D1-165D-4DDB-BCA4-9BA587CBB237@.microsoft.com...
>I work in a domain environment with a couple of Enterprise Edition SQL
> Servers. Using SSMS, when I go to register a new installation and I
> 'Browse
> for more' in the dialog box, I see a whole bunch of workstations that I
> know
> are set up with MSDE.
> How do I keep these machines from broadcasting their presence to the
> domain?
> All these MSDE installs are strictly for local machine use only and none
> of
> them should allow external connections. The fact that they are
> broadcasting
> their presence (they don't have SQL Browser because they are only MSDE) I
> see
> as a security risk. How can I stop this?
> Any suggestions.
> Thanks
> --
> Todd Chittenden
>|||Bill:
That's all well and good, but HOW do I go about configuring an instance of
MSDE when there is no user interface installed because it came packaged as
part of some 3rd party app?
Thanks
--
Todd Chittenden
"William (Bill) Vaughn" wrote:

> Yes, it is a security risk. It's been some time since I worked with MSDE,
> but I would investigate disabling the ports and protocols--much as the
> surface area configuration tool does for SQL Express 2005. This can be don
e
> if the applications are coded to use the shared memory provider (and bypas
s
> the network) and are not (in fact) shared on the net.
> hth
> --
> ____________________________________
> William (Bill) Vaughn
> Author, Mentor, Consultant
> Microsoft MVP
> INETA Speaker
> www.betav.com/blog/billva
> www.betav.com
> Please reply only to the newsgroup so that others can benefit.
> This posting is provided "AS IS" with no warranties, and confers no rights
.
> __________________________________
> Visit www.hitchhikerguides.net to get more information on my latest book:
> Hitchhiker's Guide to Visual Studio and SQL Server (7th Edition)
> and Hitchhiker's Guide to SQL Server 2005 Compact Edition (EBook)
> ----
---
> "Todd C" <ToddC@.discussions.microsoft.com> wrote in message
> news:E302F2D1-165D-4DDB-BCA4-9BA587CBB237@.microsoft.com...
>
>|||Again, it's been some time since I worked with MSDE and no, I know it does
not come with configuration tools. I expect you're going to have to visit
each system and run a reconfig script or use SQL Server Management studio
(not as easy). I found a site that seems to address some of these issues.
http://www.codeproject.com/database...gureMSDE.asp#7. I hope it helps.
____________________________________
William (Bill) Vaughn
Author, Mentor, Consultant
Microsoft MVP
INETA Speaker
www.betav.com/blog/billva
www.betav.com
Please reply only to the newsgroup so that others can benefit.
This posting is provided "AS IS" with no warranties, and confers no rights.
__________________________________
Visit www.hitchhikerguides.net to get more information on my latest book:
Hitchhiker's Guide to Visual Studio and SQL Server (7th Edition)
and Hitchhiker's Guide to SQL Server 2005 Compact Edition (EBook)
----
---
"Todd C" <ToddC@.discussions.microsoft.com> wrote in message
news:2DF6889A-A64A-483F-BE42-766155FC8AF7@.microsoft.com...[vbcol=seagreen]
> Bill:
> That's all well and good, but HOW do I go about configuring an instance of
> MSDE when there is no user interface installed because it came packaged as
> part of some 3rd party app?
> Thanks
> --
> Todd Chittenden
> "William (Bill) Vaughn" wrote:
>|||Bill:
Thanks.
Good stuff!
Todd

No comments:

Post a Comment