Steps to secure an SQL Server. - Use NT authentication. - Use server database and application roles to control access to the data. - Secure the physical database files using NTFS permissions. - Use an ungues sable SA password. - Restrict physical access to the SQL Server. - Rename the Administrator account on the SQL Server computer. - Disable the Guest account. - Enable auditing. - Use multiprotocol encryption. - Set up SSL. - Set up firewalls. - Isolate SQL Server from the web server etc
|