1

I'm not sure if this is a more a database or sysadmin question, so let me know if it doesn't fit.

Because of some licensing agreements, I've been asked to find a way to restrict which computers on our domain can connect to an instance of SQL Server.

My original idea was to try and create a login trigger to check against a list of computers to see if they matched but I've managed to lock myself out of the server 3 times already. Further to this, apparently using HOST_NAME() to identify the connecting client is not not secure.

How else could I do this from within the SQL Server environment or do I need to look at setting up Firewall rules elsewhere?

Just to be clear. We want it so any user can connect from a specific collection of computers.

1 Answer 1

3

If you want to totally restrict certain servers, then the Windows Firewall should be configured to the restriction.

See: Configure the Windows Firewall to Allow SQL Server Access

If you need to prevent a specific login from connecting, then of course you would need to manage that login's rights to the server.

Depending on the granularity of what you need to do, you might need to use both approaches.

1
  • I only need the computers restricted, not the users. I've tried setting the computers I want in Windows Firewall but this seems to block all remote connections. I'll mark this as the answer anyway and post a separate question elsewhere regarding the firewall.
    – Jake
    Commented Aug 6, 2016 at 20:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.