Showing posts with label users. Show all posts
Showing posts with label users. Show all posts

Sunday, March 25, 2012

Can not create New Subscription

Hi, I have a report that I would like to send out to users automatically every day at 10AM. For some reason on reporting server under the report I would to email, I see 3 folders...Data Source, History & Subscription but I am not able to click on "New Subscription" option in order to create new subscription.

First I created "Shared Schedule" specifing day, time etc information. And then I am tring to create Subscription but the option is disabled.

Is there any service pack I am missing or I am following the wrong procedure.

Please advice.

- Payal

Hi,

Can make sure that you have provided an account to run the report and not use the Integrated Security? To be able to use Subscriptions, Reporting Services requires you to provide a fixed account.

Greetz,

Geert

Geert Verhoeven
Consultant @. Ausy Belgium

My Personal Blog

Thursday, March 22, 2012

Can not connect to SQL Database

We periodically receive an error message: Database 'db
name' can not be found or is busy...
We seem to get it more often with users who attempt to
connect to our DB using a wireless network card in their
laptop. However, we periodically get it with users on
our network. Is this a connectivity problem and if so,
does anyone have any ideas on what we can do to resolve
this.
The last time a user using the wireless card got the the
error, we had them sign on to the network from a desktop
and they were able to access the DB.
Sounds like a connectivity issues. Are those wireless users able to ping SQL
Server, when their database connection fails?
Also, could you post the actual error message, when trying to connect? What
you showed us, looks like an error reported by an application.
HTH,
Vyas, MVP (SQL Server)
http://vyaskn.tripod.com/
"john.pederson (removethis) @.akorn.com"
<anonymous@.discussions.microsoft.com> wrote in message
news:0aa401c4999f$1e826b90$7d02280a@.phx.gbl...
We periodically receive an error message: Database 'db
name' can not be found or is busy...
We seem to get it more often with users who attempt to
connect to our DB using a wireless network card in their
laptop. However, we periodically get it with users on
our network. Is this a connectivity problem and if so,
does anyone have any ideas on what we can do to resolve
this.
The last time a user using the wireless card got the the
error, we had them sign on to the network from a desktop
and they were able to access the DB.
|||Sent you a reply - not much info for you to go on.

>--Original Message--
>Sounds like a connectivity issues. Are those wireless
users able to ping SQL
>Server, when their database connection fails?
>Also, could you post the actual error message, when
trying to connect? What
>you showed us, looks like an error reported by an
application.
>--
>HTH,
>Vyas, MVP (SQL Server)
>http://vyaskn.tripod.com/
>
>"john.pederson (removethis) @.akorn.com"
><anonymous@.discussions.microsoft.com> wrote in message
>news:0aa401c4999f$1e826b90$7d02280a@.phx.gbl...
>We periodically receive an error message: Database 'db
>name' can not be found or is busy...
>We seem to get it more often with users who attempt to
>connect to our DB using a wireless network card in their
>laptop. However, we periodically get it with users on
>our network. Is this a connectivity problem and if so,
>does anyone have any ideas on what we can do to resolve
>this.
>The last time a user using the wireless card got the the
>error, we had them sign on to the network from a desktop
>and they were able to access the DB.
>
>.
>

Monday, March 19, 2012

Can multiple users access the same report simultaneously?

We are currently using Crystal reports but are considering using SQL RS. We need to know if there is a restriction on simultanoeus access to the same report by multiple users? What happens when multiple users try to access the same report simultaneously? If reports can be accessed simultaneously, do the requests queue up or are they processed concurrently?

Any help on this issue is greatly appreciated.

Hello there..Im just a begginer in SQL RS.But for what i know,it supports multi - user,as long as they are just using the rdls deployed separately.If im wrong,please correct me..hehe.. its for improvement..hehe..thanks..

|||not quite sure what you mean by "rdls deployed separately" but the answer is yes. RS supports full multi-user access and easily scales hundreads of users.|||

Thanks. Are you able to provide any insight on how RS processes multiple simultaneous requests ie in a queue or concurrently?

|||

RS uses multi-threading if possible. It runs within the aspnet worker process in IIS so increasing the IIS threading settings (see web garden settings for an app pool) increases performance on a multi processor/core system and also increases the number of simultaneous requests.

|||

We have our web server running on one machine and SQL Server running on another, which machine would we need to change the IIS settings on? (I assume the SQL machine, is this correct?)

|||

In the context of my post I was referring to the web server. This way when you look at task manager on the web server you should see multiple aspnet_wp.exe processes. That's assuming that Reporting services is installed on the web server and the RS repository database is on the data server.

Naturally SQL Server and Analysis Services will also parallelize the query executed against them given the right hardware and configuration settings on the data server.

Sunday, March 11, 2012

Can Mac users use reporting services?

Does anyone have mac users that can authenticate to reporting services and
view reports? I have several mac users who are upset that they can not view
any reports in reporting services and I don't know enough about macs to be
of any help. Any browser recommendations or settings would be appreciated.
Thanks,
JasonHave they tried IE for the Mac? Did it not work?
--
William Stacey [MVP]
"Jason B" <nospam@.nospam.com> wrote in message
news:eXXYdhYBGHA.1088@.tk2msftngp13.phx.gbl...
> Does anyone have mac users that can authenticate to reporting services and
> view reports? I have several mac users who are upset that they can not
> view
> any reports in reporting services and I don't know enough about macs to be
> of any help. Any browser recommendations or settings would be
> appreciated.
>
> Thanks,
>
> Jason
>|||They tried IE for the Mac, I'm not sure what version, and it did not work.
I had one user that could get logged in, but all of the reports came up
blank.
"William Stacey [MVP]" <william.stacey@.gmail.com> wrote in message
news:O$4M%23qaBGHA.3408@.TK2MSFTNGP12.phx.gbl...
> Have they tried IE for the Mac? Did it not work?
> --
> William Stacey [MVP]
> "Jason B" <nospam@.nospam.com> wrote in message
> news:eXXYdhYBGHA.1088@.tk2msftngp13.phx.gbl...
> > Does anyone have mac users that can authenticate to reporting services
and
> > view reports? I have several mac users who are upset that they can not
> > view
> > any reports in reporting services and I don't know enough about macs to
be
> > of any help. Any browser recommendations or settings would be
> > appreciated.
> >
> >
> >
> > Thanks,
> >
> >
> > Jason
> >
> >
>|||hmm. I looked around a bit and could not come up with anything either other
then maybe using a TS as an IE gateway and using Remote Desktop Client for
the Macs. A pain, but would think that would at least work if you really
needed something and can't find a browser solution.
--
William Stacey [MVP]
"Jason B" <nospam@.nospam.com> wrote in message
news:OV%23rUIbBGHA.3840@.TK2MSFTNGP15.phx.gbl...
> They tried IE for the Mac, I'm not sure what version, and it did not work.
> I had one user that could get logged in, but all of the reports came up
> blank.
> "William Stacey [MVP]" <william.stacey@.gmail.com> wrote in message
> news:O$4M%23qaBGHA.3408@.TK2MSFTNGP12.phx.gbl...
>> Have they tried IE for the Mac? Did it not work?
>> --
>> William Stacey [MVP]
>> "Jason B" <nospam@.nospam.com> wrote in message
>> news:eXXYdhYBGHA.1088@.tk2msftngp13.phx.gbl...
>> > Does anyone have mac users that can authenticate to reporting services
> and
>> > view reports? I have several mac users who are upset that they can not
>> > view
>> > any reports in reporting services and I don't know enough about macs to
> be
>> > of any help. Any browser recommendations or settings would be
>> > appreciated.
>> >
>> >
>> >
>> > Thanks,
>> >
>> >
>> > Jason
>> >
>> >
>>
>

Wednesday, March 7, 2012

can I use msde use for small workgroup

Hi,
I have an access database for 3-5 users. Currently, the size of database
increase which in turn reduce the database performance. I thing to put the
back end to SQL by using MSDE since my unit cannot afford the SQL Server
version.
Can I use msde to host data in a shared drive in the network. If so how?
SF
You want to examine SQL Server 2005 Express Edition. It is a free download,
and should work for you quite well.
SQL Server 2005 Express Edition Feature Comparison
http://www.microsoft.com/sql/prodinf...-features.mspx
SQL Server 2005 Express Edition (Advanced/SSMS)
http://msdn.microsoft.com/vstudio/ex...e/default.aspx
http://msdn2.microsoft.com/en-us/library/ms365247.aspx
Arnie Rowland, Ph.D.
Westwood Consulting, Inc
Most good judgment comes from experience.
Most experience comes from bad judgment.
- Anonymous
"SF" <ssamnang@.yahoo.com> wrote in message
news:OyqOCon6GHA.4428@.TK2MSFTNGP02.phx.gbl...
> Hi,
> I have an access database for 3-5 users. Currently, the size of database
> increase which in turn reduce the database performance. I thing to put the
> back end to SQL by using MSDE since my unit cannot afford the SQL Server
> version.
> Can I use msde to host data in a shared drive in the network. If so how?
> SF
>

Friday, February 24, 2012

Can I Upload a URL or Shortcut to the SSRS Home Page?

I have a simple WSS 2.0 SharePoint site for my SSRS deployment which I would like to link my users to from the SSRS home page. Is it possible to add a link or shortcut to my SSRS home page without embedding it inside of a document or report?OK, I figured it out -- sort of. Uploading a URL shortcut did not work, I got errors when trying to click on the short-cut. My solution was to create a simple HTML page with a redirect to the SharePoint portal site. That seems to works but displays it in the same window and not a new window. If the user clicks on the link from SharePoint to go back to SSRS then they can get cascading frames, one inside the other. That is a minor problem which can be avoided if they just use their BACK button.

Thursday, February 16, 2012

Can I Restrict Values in a Parameter Dropdown based on the User?

I've got a puzzler here. I have a report with 4 different dropdown lists for
parameters. One of them is Department Id. For some users, I want them to be
able to only run the report against their own department id but still be able
to select any of the values for the other parameters. Other users will be
able to select any value for department id and the other parameters.
I can figure out how to write the query to populate the Department ID
dropdown but cannot figure how to access the current userid programatically.
Is there a way to access the user ID in order to restrict the values in a
parameter dropdown?
I'm using RS2003 with SQL Server 2000. Any ideas are welcome!
Thanks,
LizThis is really quite easy. There is a global parameter called User!UserID it
returns the domain and user ID of the user running the report. To see the
format of this create a report with a single textbox (no datasets). Set the
text box to an expression and set it to this (case sensitive):
=User!UserID
You might want to strip the domain off.
OK, the second part of this is that you need to realize that query parameter
and report parameter are two different things. You do not have to have a
query parameter mapped to a report parameter. It can be mapped to an
expression instead.
So, let's say you have this query
Select department from mydepartmentlist where userID = @.UserID
RS will create a report parameter for this called UserID. You will not use
it. You will delete it. Instead in the dataset tab click on the ... go to
the parameters tab, click on the dropdown box where the query parameter is
being mapped to report parameter and pick expression instead. Then set it to
the expression above. If you don't want the domain then use something like
this:
=mid(User!UserID, LengthToCutOffTheFront)
Of course for all of this to work you need a table somewhere that maps the
userid to the departments.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Liz" <Liz@.discussions.microsoft.com> wrote in message
news:5A54A060-B916-4BB4-AE03-9AF8302601A7@.microsoft.com...
> I've got a puzzler here. I have a report with 4 different dropdown lists
> for
> parameters. One of them is Department Id. For some users, I want them to
> be
> able to only run the report against their own department id but still be
> able
> to select any of the values for the other parameters. Other users will be
> able to select any value for department id and the other parameters.
> I can figure out how to write the query to populate the Department ID
> dropdown but cannot figure how to access the current userid
> programatically.
> Is there a way to access the user ID in order to restrict the values in a
> parameter dropdown?
> I'm using RS2003 with SQL Server 2000. Any ideas are welcome!
> Thanks,
> Liz
>|||Thanks! That's very helpful and I've already succeeded at stripping off the
domain name.
I know you can pass parameter values through the URL and query string to the
report. If I wanted to pass the department ID from the calling application
to populate the dropdown, is there a way to pass that one parameter value and
let the user select the other three?
Thanks for your help,
Liz
"Bruce L-C [MVP]" wrote:
> This is really quite easy. There is a global parameter called User!UserID it
> returns the domain and user ID of the user running the report. To see the
> format of this create a report with a single textbox (no datasets). Set the
> text box to an expression and set it to this (case sensitive):
> =User!UserID
> You might want to strip the domain off.
> OK, the second part of this is that you need to realize that query parameter
> and report parameter are two different things. You do not have to have a
> query parameter mapped to a report parameter. It can be mapped to an
> expression instead.
> So, let's say you have this query
> Select department from mydepartmentlist where userID = @.UserID
> RS will create a report parameter for this called UserID. You will not use
> it. You will delete it. Instead in the dataset tab click on the ... go to
> the parameters tab, click on the dropdown box where the query parameter is
> being mapped to report parameter and pick expression instead. Then set it to
> the expression above. If you don't want the domain then use something like
> this:
> =mid(User!UserID, LengthToCutOffTheFront)
> Of course for all of this to work you need a table somewhere that maps the
> userid to the departments.
>
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
> "Liz" <Liz@.discussions.microsoft.com> wrote in message
> news:5A54A060-B916-4BB4-AE03-9AF8302601A7@.microsoft.com...
> > I've got a puzzler here. I have a report with 4 different dropdown lists
> > for
> > parameters. One of them is Department Id. For some users, I want them to
> > be
> > able to only run the report against their own department id but still be
> > able
> > to select any of the values for the other parameters. Other users will be
> > able to select any value for department id and the other parameters.
> >
> > I can figure out how to write the query to populate the Department ID
> > dropdown but cannot figure how to access the current userid
> > programatically.
> > Is there a way to access the user ID in order to restrict the values in a
> > parameter dropdown?
> >
> > I'm using RS2003 with SQL Server 2000. Any ideas are welcome!
> >
> > Thanks,
> > Liz
> >
> >
>
>|||Sure. You have have a hidden parameter that gets filled in by the calling
application. The user only selects from the list you provide. Look at hidden
parameters in the books online.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Liz" <Liz@.discussions.microsoft.com> wrote in message
news:D0F372BF-DA85-4BD6-A01C-ED2708F14BAC@.microsoft.com...
> Thanks! That's very helpful and I've already succeeded at stripping off
> the
> domain name.
> I know you can pass parameter values through the URL and query string to
> the
> report. If I wanted to pass the department ID from the calling
> application
> to populate the dropdown, is there a way to pass that one parameter value
> and
> let the user select the other three?
> Thanks for your help,
> Liz
>
> "Bruce L-C [MVP]" wrote:
>> This is really quite easy. There is a global parameter called User!UserID
>> it
>> returns the domain and user ID of the user running the report. To see the
>> format of this create a report with a single textbox (no datasets). Set
>> the
>> text box to an expression and set it to this (case sensitive):
>> =User!UserID
>> You might want to strip the domain off.
>> OK, the second part of this is that you need to realize that query
>> parameter
>> and report parameter are two different things. You do not have to have a
>> query parameter mapped to a report parameter. It can be mapped to an
>> expression instead.
>> So, let's say you have this query
>> Select department from mydepartmentlist where userID = @.UserID
>> RS will create a report parameter for this called UserID. You will not
>> use
>> it. You will delete it. Instead in the dataset tab click on the ... go to
>> the parameters tab, click on the dropdown box where the query parameter
>> is
>> being mapped to report parameter and pick expression instead. Then set it
>> to
>> the expression above. If you don't want the domain then use something
>> like
>> this:
>> =mid(User!UserID, LengthToCutOffTheFront)
>> Of course for all of this to work you need a table somewhere that maps
>> the
>> userid to the departments.
>>
>> --
>> Bruce Loehle-Conger
>> MVP SQL Server Reporting Services
>> "Liz" <Liz@.discussions.microsoft.com> wrote in message
>> news:5A54A060-B916-4BB4-AE03-9AF8302601A7@.microsoft.com...
>> > I've got a puzzler here. I have a report with 4 different dropdown
>> > lists
>> > for
>> > parameters. One of them is Department Id. For some users, I want them
>> > to
>> > be
>> > able to only run the report against their own department id but still
>> > be
>> > able
>> > to select any of the values for the other parameters. Other users will
>> > be
>> > able to select any value for department id and the other parameters.
>> >
>> > I can figure out how to write the query to populate the Department ID
>> > dropdown but cannot figure how to access the current userid
>> > programatically.
>> > Is there a way to access the user ID in order to restrict the values in
>> > a
>> > parameter dropdown?
>> >
>> > I'm using RS2003 with SQL Server 2000. Any ideas are welcome!
>> >
>> > Thanks,
>> > Liz
>> >
>> >
>>

Can I restrict members of db_datareader from SELECTing from a tabl

I have a large database with lost of users, many of whom are in the
db_datareader role.
I have a table that I want to restrict SELECTs on to just sa's.
How can I restrict members of db_datareader from SELECTing from this table?
As shown below, I cannot REVOKE or DENY SELECT from this role.
I could remove everyone from db_datareader and put them in a special role
with SELECT on everything but this table. But is there an easier way?
Thanks
USE admin
CREATE TABLE myTable
(col1 int PRIMARY KEY IDENTITY
,col2 int
,col3 int)
INSERT myTable (col2) VALUES (10)
INSERT myTable (col2) VALUES (20)
INSERT myTable (col2) VALUES (30)
SELECT * FROM myTable
execute as login = 'appuser'
select suser_name()
SELECT * FROM myTable
revert
sp_helprolemember db_datareader
REVOKE SELECT ON myTable TO db_datareader
--Cannot grant, deny or revoke permissions to or from special roles.
DENY SELECT ON myTable TO db_datareader
Hello,
You can not attempt to issue a DENY or REVOKE on to a fixed role.Issue the
DENY SELECT statement on to all uses who are not supposed to
query the table and see if that works well.
THanks
Hari
"Dave" <Dave@.discussions.microsoft.com> wrote in message
news:B4980135-A8AE-4D4B-8B11-2623407D8986@.microsoft.com...
>I have a large database with lost of users, many of whom are in the
> db_datareader role.
> I have a table that I want to restrict SELECTs on to just sa's.
> How can I restrict members of db_datareader from SELECTing from this
> table?
> As shown below, I cannot REVOKE or DENY SELECT from this role.
> I could remove everyone from db_datareader and put them in a special role
> with SELECT on everything but this table. But is there an easier way?
> Thanks
> --
> USE admin
> CREATE TABLE myTable
> (col1 int PRIMARY KEY IDENTITY
> ,col2 int
> ,col3 int)
> INSERT myTable (col2) VALUES (10)
> INSERT myTable (col2) VALUES (20)
> INSERT myTable (col2) VALUES (30)
> SELECT * FROM myTable
> execute as login = 'appuser'
> select suser_name()
> SELECT * FROM myTable
> revert
> sp_helprolemember db_datareader
> REVOKE SELECT ON myTable TO db_datareader
> --Cannot grant, deny or revoke permissions to or from special roles.
> DENY SELECT ON myTable TO db_datareader
>
>
|||Hi Dave
"Dave" wrote:

> I have a large database with lost of users, many of whom are in the
> db_datareader role.
> I have a table that I want to restrict SELECTs on to just sa's.
>
It sounds like you need to make your security more granular, by creating
your own role(s) that only have the permissions the users actually need. You
could also do this using Windows Groups (or a combination of both!) if you
are using Windows Authentication. By only using Stored Procedures to access
your data it may be possible to limit who can SELECT from a table further.
John

Can I restrict members of db_datareader from SELECTing from a tabl

I have a large database with lost of users, many of whom are in the
db_datareader role.
I have a table that I want to restrict SELECTs on to just sa's.
How can I restrict members of db_datareader from SELECTing from this table?
As shown below, I cannot REVOKE or DENY SELECT from this role.
I could remove everyone from db_datareader and put them in a special role
with SELECT on everything but this table. But is there an easier way?
Thanks
--
USE admin
CREATE TABLE myTable
(col1 int PRIMARY KEY IDENTITY
,col2 int
,col3 int)
INSERT myTable (col2) VALUES (10)
INSERT myTable (col2) VALUES (20)
INSERT myTable (col2) VALUES (30)
SELECT * FROM myTable
execute as login = 'appuser'
select suser_name()
SELECT * FROM myTable
revert
sp_helprolemember db_datareader
REVOKE SELECT ON myTable TO db_datareader
--Cannot grant, deny or revoke permissions to or from special roles.
DENY SELECT ON myTable TO db_datareaderHello,
You can not attempt to issue a DENY or REVOKE on to a fixed role.Issue the
DENY SELECT statement on to all uses who are not supposed to
query the table and see if that works well.
THanks
Hari
"Dave" <Dave@.discussions.microsoft.com> wrote in message
news:B4980135-A8AE-4D4B-8B11-2623407D8986@.microsoft.com...
>I have a large database with lost of users, many of whom are in the
> db_datareader role.
> I have a table that I want to restrict SELECTs on to just sa's.
> How can I restrict members of db_datareader from SELECTing from this
> table?
> As shown below, I cannot REVOKE or DENY SELECT from this role.
> I could remove everyone from db_datareader and put them in a special role
> with SELECT on everything but this table. But is there an easier way?
> Thanks
> --
> USE admin
> CREATE TABLE myTable
> (col1 int PRIMARY KEY IDENTITY
> ,col2 int
> ,col3 int)
> INSERT myTable (col2) VALUES (10)
> INSERT myTable (col2) VALUES (20)
> INSERT myTable (col2) VALUES (30)
> SELECT * FROM myTable
> execute as login = 'appuser'
> select suser_name()
> SELECT * FROM myTable
> revert
> sp_helprolemember db_datareader
> REVOKE SELECT ON myTable TO db_datareader
> --Cannot grant, deny or revoke permissions to or from special roles.
> DENY SELECT ON myTable TO db_datareader
>
>|||Hi Dave
"Dave" wrote:
> I have a large database with lost of users, many of whom are in the
> db_datareader role.
> I have a table that I want to restrict SELECTs on to just sa's.
>
It sounds like you need to make your security more granular, by creating
your own role(s) that only have the permissions the users actually need. You
could also do this using Windows Groups (or a combination of both!) if you
are using Windows Authentication. By only using Stored Procedures to access
your data it may be possible to limit who can SELECT from a table further.
John

Can I restrict members of db_datareader from SELECTing from a tabl

I have a large database with lost of users, many of whom are in the
db_datareader role.
I have a table that I want to restrict SELECTs on to just sa's.
How can I restrict members of db_datareader from SELECTing from this table?
As shown below, I cannot REVOKE or DENY SELECT from this role.
I could remove everyone from db_datareader and put them in a special role
with SELECT on everything but this table. But is there an easier way?
Thanks
USE admin
CREATE TABLE myTable
(col1 int PRIMARY KEY IDENTITY
,col2 int
,col3 int)
INSERT myTable (col2) VALUES (10)
INSERT myTable (col2) VALUES (20)
INSERT myTable (col2) VALUES (30)
SELECT * FROM myTable
execute as login = 'appuser'
select suser_name()
SELECT * FROM myTable
revert
sp_helprolemember db_datareader
REVOKE SELECT ON myTable TO db_datareader
--Cannot grant, deny or revoke permissions to or from special roles.
DENY SELECT ON myTable TO db_datareaderHello,
You can not attempt to issue a DENY or REVOKE on to a fixed role.Issue the
DENY SELECT statement on to all uses who are not supposed to
query the table and see if that works well.
THanks
Hari
"Dave" <Dave@.discussions.microsoft.com> wrote in message
news:B4980135-A8AE-4D4B-8B11-2623407D8986@.microsoft.com...
>I have a large database with lost of users, many of whom are in the
> db_datareader role.
> I have a table that I want to restrict SELECTs on to just sa's.
> How can I restrict members of db_datareader from SELECTing from this
> table?
> As shown below, I cannot REVOKE or DENY SELECT from this role.
> I could remove everyone from db_datareader and put them in a special role
> with SELECT on everything but this table. But is there an easier way?
> Thanks
> --
> USE admin
> CREATE TABLE myTable
> (col1 int PRIMARY KEY IDENTITY
> ,col2 int
> ,col3 int)
> INSERT myTable (col2) VALUES (10)
> INSERT myTable (col2) VALUES (20)
> INSERT myTable (col2) VALUES (30)
> SELECT * FROM myTable
> execute as login = 'appuser'
> select suser_name()
> SELECT * FROM myTable
> revert
> sp_helprolemember db_datareader
> REVOKE SELECT ON myTable TO db_datareader
> --Cannot grant, deny or revoke permissions to or from special roles.
> DENY SELECT ON myTable TO db_datareader
>
>|||Hi Dave
"Dave" wrote:

> I have a large database with lost of users, many of whom are in the
> db_datareader role.
> I have a table that I want to restrict SELECTs on to just sa's.
>
It sounds like you need to make your security more granular, by creating
your own role(s) that only have the permissions the users actually need. You
could also do this using Windows Groups (or a combination of both!) if you
are using Windows Authentication. By only using Stored Procedures to access
your data it may be possible to limit who can SELECT from a table further.
John

Tuesday, February 14, 2012

Can I remove the ability of sa to create users?

HI, I know what I should do is jus change the password, but there are over
100 jobs and DTS package connections that run with sa auth, and that will
take a long time, unless someone knows how that can be automated to change
all sa users to something else, sorry that's another question. The issue I
have is that I came into a Job where security setting were left wide open,
and as I try to provide security, and tighten things down, I have users who
know the sa PW and can go in create a new local ID and set themselves as SA,
System Administrator. Although they should be delt with by admin, that's
another story... SO question is how can I disallow sa from creating
logins, AND how can I change all job, and DTS connections (anything that
uses sa creds) to something else? PLEASE... Thanks you.You basically can't deny anything to SA. Giving out the SA password is a
VERY bad thing to do. Your choices are to change it or fire everyone who
knows it.
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"WANNABE" <breichenbach AT istate DOT com> wrote in message
news:ueC1Pm5xGHA.2168@.TK2MSFTNGP06.phx.gbl...
> HI, I know what I should do is jus change the password, but there are
> over 100 jobs and DTS package connections that run with sa auth, and that
> will take a long time, unless someone knows how that can be automated to
> change all sa users to something else, sorry that's another question. The
> issue I have is that I came into a Job where security setting were left
> wide open, and as I try to provide security, and tighten things down, I
> have users who know the sa PW and can go in create a new local ID and set
> themselves as SA, System Administrator. Although they should be delt with
> by admin, that's another story... SO question is how can I disallow sa
> from creating logins, AND how can I change all job, and DTS connections
> (anything that uses sa creds) to something else? PLEASE... Thanks you.
>|||Thanks Roger, That is what I thought.
"Roger Wolter[MSFT]" <rwolter@.online.microsoft.com> wrote in message
news:uCJGrG8xGHA.4960@.TK2MSFTNGP05.phx.gbl...
> You basically can't deny anything to SA. Giving out the SA password is a
> VERY bad thing to do. Your choices are to change it or fire everyone who
> knows it.
> --
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> Use of included script samples are subject to the terms specified at
> http://www.microsoft.com/info/cpyright.htm
> "WANNABE" <breichenbach AT istate DOT com> wrote in message
> news:ueC1Pm5xGHA.2168@.TK2MSFTNGP06.phx.gbl...
>> HI, I know what I should do is jus change the password, but there are
>> over 100 jobs and DTS package connections that run with sa auth, and that
>> will take a long time, unless someone knows how that can be automated to
>> change all sa users to something else, sorry that's another question.
>> The issue I have is that I came into a Job where security setting were
>> left wide open, and as I try to provide security, and tighten things
>> down, I have users who know the sa PW and can go in create a new local ID
>> and set themselves as SA, System Administrator. Although they should be
>> delt with by admin, that's another story... SO question is how can I
>> disallow sa from creating logins, AND how can I change all job, and DTS
>> connections (anything that uses sa creds) to something else? PLEASE...
>> Thanks you.
>

Can I remove the ability of sa to create users?

HI, I know what I should do is jus change the password, but there are over
100 jobs and DTS package connections that run with sa auth, and that will
take a long time, unless someone knows how that can be automated to change
all sa users to something else, sorry that's another question. The issue I
have is that I came into a Job where security setting were left wide open,
and as I try to provide security, and tighten things down, I have users who
know the sa PW and can go in create a new local ID and set themselves as SA,
System Administrator. Although they should be delt with by admin, that's
another story... SO question is how can I disallow sa from creating
logins, AND how can I change all job, and DTS connections (anything that
uses sa creds) to something else? PLEASE... Thanks you.You basically can't deny anything to SA. Giving out the SA password is a
VERY bad thing to do. Your choices are to change it or fire everyone who
knows it.
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"WANNABE" <breichenbach AT istate DOT com> wrote in message
news:ueC1Pm5xGHA.2168@.TK2MSFTNGP06.phx.gbl...
> HI, I know what I should do is jus change the password, but there are
> over 100 jobs and DTS package connections that run with sa auth, and that
> will take a long time, unless someone knows how that can be automated to
> change all sa users to something else, sorry that's another question. The
> issue I have is that I came into a Job where security setting were left
> wide open, and as I try to provide security, and tighten things down, I
> have users who know the sa PW and can go in create a new local ID and set
> themselves as SA, System Administrator. Although they should be delt with
> by admin, that's another story... SO question is how can I disallow sa
> from creating logins, AND how can I change all job, and DTS connections
> (anything that uses sa creds) to something else? PLEASE... Thanks you.
>|||Thanks Roger, That is what I thought.
"Roger Wolter[MSFT]" <rwolter@.online.microsoft.com> wrote in message
news:uCJGrG8xGHA.4960@.TK2MSFTNGP05.phx.gbl...
> You basically can't deny anything to SA. Giving out the SA password is a
> VERY bad thing to do. Your choices are to change it or fire everyone who
> knows it.
> --
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> Use of included script samples are subject to the terms specified at
> http://www.microsoft.com/info/cpyright.htm
> "WANNABE" <breichenbach AT istate DOT com> wrote in message
> news:ueC1Pm5xGHA.2168@.TK2MSFTNGP06.phx.gbl...
>

Sunday, February 12, 2012

Can I move some column position by using SQL command ?

I created SQL table follow by XSD file

And when any users added new column to XSD in ordinal position = 3

But after my program successfully created new column, its position is the last position

What can I do ??

I suspect why I can't set it (I've looked for solution on MSDN already)

even though

We can see ordinal position by

this query

SELECT *
FROM INFORMATION_SCHEMA.Columns

What can I do for solving ?? Help me please

You're adding columns dynamically? They will go to the end and I'd be surprised if there was any way to change the position.

But more importantly, why are you adding columns dynamically and why do you care what position the columns are in? It makes no difference what the physical col position is in a table