如何禁用SQL Server 2008 R2数据库复制

Question

I've SQL Database that I've to install to a client. I really don't want my database tables and other components exposed. The thing is that I've limited work experience on SQL Server 2008 R2 security setting. Besides, is it possible to disable physical database copy from the folder where the database is located?

Thank you in advance

Answer 1

You can run the SQL server under its own user (good practice for security anyway), and grant only that user permissions to the directory where the physical database is stored. This will prevent some other limited user from being able to copy the physical database files; but will not stop administrators.

Administrative users have SeBackupPrivilege and SeTakeOwnershipPrivilege , so they can overwrite whatever permissions you may have set.

Of course, if the client has physical access to the machine, they effectively own the data on that machine; there's nothing you can do about that. A good software security system starts with a good physical security system.