将Windows客户端上的SQL Server凭据存储到Access SQL Server的位置

Question

I have a Windows service running under a local system account on all company clients. But my service needs to access SQL Server 2008 R2 which is on a central SQL Server instance.

My problem is how to securely store the login credentials for the SQL Server connection and access them with C#. Or is there another opportunity to connect to SQL Server?

What are best practices for such a scenario?

Answer 1

The best approach would be to run the Windows Service under a dedicated domain account. This way username and password would not need to be stored on the local computer at all. You could use integrated security instead and grant SQL Server access to that domain account.

If that's not an option for you, you will need to encrypt the sensitive data in your configuration file. You might want to take a look at SectionInformation.ProtectSection method.