|
I am able to view and access a SQL 2005/2008 database other than my own while connected with Enterprise Manager, Query Analyzer, or the SQL Web admin
When we set up SQL databases for our users they are secure. Your databases are exposed to others only if you modify the user access rights to allow exposure to others. That is most commonly done by adding Guest Access to your SQL database.
DO NOT add Guest User to your SQL database, as this will allow all other users on your SQL server to see your database.
What should I do if I can see SQL Databases other than my own?
Please report this to our technical support department immediately with the exposed database name. We will remove Guest Access to protect customer data and contact the customer to inform them of the issue.
How can I check to make sure that I have not added Guest Access to my SQL database?
To check if you have enabled Guess Access to your database, follow the steps below:
SQL 2005
- Log into your SQL 2005 database using SQL 2005 server Management studio
- Navigate to your SQL 2005 database
- Open Security folder
- Open Users folder
- Double click "Guest" folder, right click "properties"
- To insure user guest is disabled, confirm all check boxes (except guest/grayed out) are unmarked
SQL 2008
- Log into your SQL 2008 database using SQL 2008 server Management studio
- Navigate to your SQL 2008 database
- Expand Security folder
- Expand users sub folder
- Double click "Guest" folder, right click "properties"
- To insure user guest is disabled, confirm all check boxes (except guest/grayed out) are unmarked
|