Designing for Security

The third and final design factor is security. As the DBA, you must ensure that your data is safe from theft, damage, and destruction. This can be accomplished in several ways.

First, you can control who has access to your database server. This is accomplished by granting access only to users who need it. While that may sound obvious, it's surprisingly common to see DBAs adding the Domain Users group or the Everyone group in an attempt to "ease the burden" of SQL Server administration. Of course, this behavior is not recommended.

Second, you can control what the users have access to once they have entered the database server. This is accomplished at the database level. You may choose to give some users write access and ...

Get SQL Server® 2008 Administration: Real World Skills for MCITP Certification and Beyond now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.