[RESOLVED] Securing an SQL SERVER EXPRESS database

[makko]

I have an VB.NET app that connects to an SSE 2005 database on local system.

I must deploy this app to many clients ... I want to know how can I securize the database on each computer

Thank you

[szlamany]

Everyone needs a separate copy of the DB?

[makko]

yes ... everyone has its own copy of database which extends it separately from others

[Hack]

That makes no sense. How are you going to synchronize them all?

Typically and SQL Server database is installed on a network file server, and multiple people have access to the same database.

[makko]

each client has its own data ... they dont communicate with each other

[szlamany]

Ok - that's fine.

Now explain what you are trying to secure.

Do you not want them to find the .MDB file? If they have access to their own PC that's kind of hard to avoid.

Do you not want them to be able to "look" at the data in the .MDB file?

Exactly what are you trying to secure?

[makko]

Well the bottom line is ...

If I install the app to a computer ... I dont want someonelse to just copy paste the app and database to another computer ...

It must not run unless I install it

[szlamany]

Do you realize that has nothing to do with SECURING a SQL SERVER DATABASE?

You are now asking to make sure that you install the app - so that you have some kind of feature in your app to make sure the app is installed by you.

Are you concerned about the .EXE being copied to another machine?

Is the database special in some way also - or is the .EXE required to make anything about the database useful anyway?

[makko]

I see where you're trying to get me ... but ...

I'm trying to understand if I can make an secure app just from the database not from the installation

Let me put the question another way ... can I put an password to an database not just to an SQL SERVER instance because at the end not the instance is copyed but the database

[szlamany]

You can put some encrypted item in your tables - like encrypt the name of the computer being used - and then your app verifies that value when it starts.

There are dozens of ways to handle this type of security - but they all have obvious drawbacks. What if the computer crashes and they need to run it on another machine - are you always available to help with install rights like this?

[makko]

belive me szlamany, for security I am always available ... So please can you redirect me to some examples ... I googled all day and all I got is dynamic publishing from movabletype

[szlamany]

Have you seen this thread - from MartinLiss in the code bank?

http://www.vbforums.com/showthread.php?t=232146

[makko]

thank you szlamany ... I will use that ideea in my project