Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I wonder what are the security risks in using Linked Server.

share|improve this question
up vote 2 down vote accepted

You are creating a path to another location, be it SQL Server, Oracle, DB2 whatever. So the security risks are there but can be whatever you make of them. For example if you set up a linked server to a SQL Server and tell it to impersonate SA for every connection then the security risks are massive. If however you tell it to only use the users current security context the risks are less so. With any additional "option" that you turn on or use you increase your security risks by a certain amount. You just need to make sure that you do your due diligence about how you set it up.

Personally I prefer to use the "Be made using the login's current security context" option. No SQL Server IDs will be able to use it and only AD logins that are on both machines will be able to do so. If you want to use the option "Be made using this security context" option then make sure that the user you are giving out has minimal permissions and that those are permissions you are willing to give out to EVERYONE.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.