0

Is it possible to avoid having to store DB passwords applications/service accounts needing access to the DB? I would like to avoid the risk of a system admin obtaining the password and then accessing the DB himself.

  • Of course an Application Firewall to some extend could control access to the DB but this is rather a password protection question. – George Apr 29 '17 at 11:20
  • What kind of privileges does the admin have on the machine? – multithr3at3d Apr 30 '17 at 15:51
  • The admin could potentially have full access to the machine. It is this reason that I'm researching how to avoid having DB passwords accessible by him/her. – George May 1 '17 at 15:23
1

Windows Integrated Security allows you to use the account already running the application to login to the database thus avoiding the need to put a password in the connection string inside the configuration file

https://msdn.microsoft.com/en-us/ie/aa984236(v=vs.94)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.