|
Posted by Roger Abell [MVP] on December 21, 2005, 2:12 pm
Please log in for more thread options Sure that is possible.
The main strategy used is to only hire trustworthy people
for positions enabled for sensitive access.
A second approach is to audit account management actions.
This second is more for show than real. You must policy the
logged information for one thing.
The bottom line however is that an admin will be able to get
access to anything given determination. An admin would not
even need to change the password on an account, as you have
suggested, in order to get a process running as that account.
It would just take a somewhat more skilled admin, and it would
not leave such a highly visible audit trail.
--
Roger Abell
Microsoft MVP (Windows Server : Security)
> Hi Roger,
>
> Would it be possible for the network admins to reset a user's password and
> then access the application as them? Is there any way of catering for this
> type of circumstance?
>
> Thanks
> David
>
> "Roger Abell [MVP]" wrote:
>
>> First, note that "network admin"s do not need to be SQL admins,
>> and in most cases should not be.
>> Without SQL "sa", then the accounts will only have access in SQL
>> as is configured within SQL for the database.
>> The application should be encrypting (with seeding) the fields in its
>> table(s) that contain sensitive information.
>> The data should be traveling with encryption as can be configured
>> in the SQL client and server networking.
>> If the application allows for configuring access control (as to what
>> accounts may use the application) then that control should be used
>> effectively. Whether the application accesses data as the user or by
>> use of an application role will control the extent of exposure posed
>> by the application itself depending on how it does or does not control
>> access. Nevertheless you could exert some (imperfect against network
>> admins) control over access to the application executable in normal
>> NTFS manner.
>>
>> > We have an application that stores sensitive information in a SQL
>> > Server
>> > 2000
>> > database. Windows authentication is used for access to the application
>> > and
>> > database. We are concerned that staff with network admin rights will be
>> > able
>> > to access the application and are looking for security configurations
>> > that
>> > will prevent such access. We have also implemented AD on our servers.
>>
>>
>>
| 
XML Sitemap