Mary Chipman [MSFT] replied to Amos Sobel
18-Nov-09 12:10 PM
What you are doing -- using the sa login with a password -- is
extremely dangerous. Access caches login information in clear text,
and any attacker who has the sa login and password can take over not
only your SQL Server, but can potentially compromise your entire
network. DSNs are also saved on the local machine in clear text, so
they are a security vulnerability all by themselves. I would urge you
to run the following search and follow the recommendations:
http://www.bing.com/search?q=sql+server+security+best+practices
Here is a paper that will help you understanding how Access and SQL
Server work together:
Optimizing Microsoft Office Access Applications Linked to SQL Server
http://msdn.microsoft.com/en-us/library/bb188204.aspx
--Mary