Home All Groups Group Topic Archive Search About

Enterprise Manager Newbie Question

Author
8 May 2006 10:26 PM
BayCoMIS
Let me preface by saying that I'm not a DBA-type person.  I'm more of the
network guy who truly hopes to have an honest-to-God DBA hired on within the
next six months.  I'm the interim DBA without much DBA knowledge just backing
up databases as best I can.

For pure political reasons, I must allow a non-IT person access to
Enterprise Manager for a SQL 2005 database within their subnet.  (Scary, to
say the least.)  The main reason is that they want to be able to backup their
own database whenever they see fit -- scheduling be damned!  The software
vendor does not offer a backup within their own software; Enterprise Manager
must be used -- with full admin privileges of the SQL Server!!!

I want to be able to prevent the user from accessing any of the other SQL
databases (2000 & 2005) within the domain.  Is this possible?  If so, how? 
Can someone point me in the right direction?

I'd much prefer a script of some kind to allow the user to run a SQL backup
of the database without invoking Enterprise Manager at all.  Is THIS possible?

My sanity begs for help.  Thanks in advance to whomever can offer assistance
with this issue.

Author
9 May 2006 4:02 PM
Geoff N. Hiten
First,  Enterprise Manager does not work with SQL 2005.  You have to use the
new SQL Server Management Studio.  SSMS does work with SQL 2000 and SQL
2005.

Second, why don't you write a short backup script using the SQLCMD utility
that he can invoke to create a backup, you do not have to start a backup
using a GUI.  Alternatively, with transaction log backups and FULL recovery,
he can recover to any point in time with the scheduled full restore as the
starting point.  Therefore he has no need to create random backups.

--
Geoff N. Hiten
Senior Database Administrator
Microsoft SQL Server MVP




Show quote
"BayCoMIS" <BayCo***@discussions.microsoft.com> wrote in message
news:80DC3B08-92DF-46C5-A697-9566F5159404@microsoft.com...
> Let me preface by saying that I'm not a DBA-type person.  I'm more of the
> network guy who truly hopes to have an honest-to-God DBA hired on within
> the
> next six months.  I'm the interim DBA without much DBA knowledge just
> backing
> up databases as best I can.
>
> For pure political reasons, I must allow a non-IT person access to
> Enterprise Manager for a SQL 2005 database within their subnet.  (Scary,
> to
> say the least.)  The main reason is that they want to be able to backup
> their
> own database whenever they see fit -- scheduling be damned!  The software
> vendor does not offer a backup within their own software; Enterprise
> Manager
> must be used -- with full admin privileges of the SQL Server!!!
>
> I want to be able to prevent the user from accessing any of the other SQL
> databases (2000 & 2005) within the domain.  Is this possible?  If so, how?
> Can someone point me in the right direction?
>
> I'd much prefer a script of some kind to allow the user to run a SQL
> backup
> of the database without invoking Enterprise Manager at all.  Is THIS
> possible?
>
> My sanity begs for help.  Thanks in advance to whomever can offer
> assistance
> with this issue.
Author
16 May 2006 9:16 PM
BayCoMIS
Geoff,

Thanks for the scripting advice.  Unfortunately, I don't know much about
SQLCMD scripting.  So, my next (obvoius) question would be:

Is it possible to write a script that one could run from a workstation and
NOT have SSMS installed on that workstation?   Can we Share out the
directories in which the database and transaction logs are located
(READ-ONLY, of course) and have a script run from the workstation so that we
don't have to have SSMS installed for the user?

Thanks again for your help.  I've been researching the SQLCMD and trying to
get a grip on it. 


Show quote
"Geoff N. Hiten" wrote:

> First,  Enterprise Manager does not work with SQL 2005.  You have to use the
> new SQL Server Management Studio.  SSMS does work with SQL 2000 and SQL
> 2005.
>
> Second, why don't you write a short backup script using the SQLCMD utility
> that he can invoke to create a backup, you do not have to start a backup
> using a GUI.  Alternatively, with transaction log backups and FULL recovery,
> he can recover to any point in time with the scheduled full restore as the
> starting point.  Therefore he has no need to create random backups.
>
> --
> Geoff N. Hiten
> Senior Database Administrator
> Microsoft SQL Server MVP
>
>
>
>
> "BayCoMIS" <BayCo***@discussions.microsoft.com> wrote in message
> news:80DC3B08-92DF-46C5-A697-9566F5159404@microsoft.com...
> > Let me preface by saying that I'm not a DBA-type person.  I'm more of the
> > network guy who truly hopes to have an honest-to-God DBA hired on within
> > the
> > next six months.  I'm the interim DBA without much DBA knowledge just
> > backing
> > up databases as best I can.
> >
> > For pure political reasons, I must allow a non-IT person access to
> > Enterprise Manager for a SQL 2005 database within their subnet.  (Scary,
> > to
> > say the least.)  The main reason is that they want to be able to backup
> > their
> > own database whenever they see fit -- scheduling be damned!  The software
> > vendor does not offer a backup within their own software; Enterprise
> > Manager
> > must be used -- with full admin privileges of the SQL Server!!!
> >
> > I want to be able to prevent the user from accessing any of the other SQL
> > databases (2000 & 2005) within the domain.  Is this possible?  If so, how?
> > Can someone point me in the right direction?
> >
> > I'd much prefer a script of some kind to allow the user to run a SQL
> > backup
> > of the database without invoking Enterprise Manager at all.  Is THIS
> > possible?
> >
> > My sanity begs for help.  Thanks in advance to whomever can offer
> > assistance
> > with this issue.
>
>
>
Author
16 May 2006 9:26 PM
Geoff N. Hiten
Yes.  SQLCMD does not require SSMS.  SSMS has a mode to help author such
scripts, but they can be run without the full toolkit.  Again, BOL (Books
On-Line) has the details.

As for the file shares, only the SQL Service account needs access to the
share for the backup file.  It already controls the folders for the database
and logs.  BTW, a SQL backup is not a simple copy of the database files.  It
is a bit more complex so a backup can be transactionally consistent AND not
cause blocking while taking the backup.  Suffice it to say that the SQL
Server handles all the heavy lifting, all you need to do is tell it to start
and where to find/place the file.

--
Geoff N. Hiten
Senior Database Administrator
Microsoft SQL Server MVP



Show quote
"BayCoMIS" <BayCo***@discussions.microsoft.com> wrote in message
news:3DCE1CE9-524E-4610-A60D-999E080A7CA0@microsoft.com...
> Geoff,
>
> Thanks for the scripting advice.  Unfortunately, I don't know much about
> SQLCMD scripting.  So, my next (obvoius) question would be:
>
> Is it possible to write a script that one could run from a workstation and
> NOT have SSMS installed on that workstation?   Can we Share out the
> directories in which the database and transaction logs are located
> (READ-ONLY, of course) and have a script run from the workstation so that
> we
> don't have to have SSMS installed for the user?
>
> Thanks again for your help.  I've been researching the SQLCMD and trying
> to
> get a grip on it.
>
>
> "Geoff N. Hiten" wrote:
>
>> First,  Enterprise Manager does not work with SQL 2005.  You have to use
>> the
>> new SQL Server Management Studio.  SSMS does work with SQL 2000 and SQL
>> 2005.
>>
>> Second, why don't you write a short backup script using the SQLCMD
>> utility
>> that he can invoke to create a backup, you do not have to start a backup
>> using a GUI.  Alternatively, with transaction log backups and FULL
>> recovery,
>> he can recover to any point in time with the scheduled full restore as
>> the
>> starting point.  Therefore he has no need to create random backups.
>>
>> --
>> Geoff N. Hiten
>> Senior Database Administrator
>> Microsoft SQL Server MVP
>>
>>
>>
>>
>> "BayCoMIS" <BayCo***@discussions.microsoft.com> wrote in message
>> news:80DC3B08-92DF-46C5-A697-9566F5159404@microsoft.com...
>> > Let me preface by saying that I'm not a DBA-type person.  I'm more of
>> > the
>> > network guy who truly hopes to have an honest-to-God DBA hired on
>> > within
>> > the
>> > next six months.  I'm the interim DBA without much DBA knowledge just
>> > backing
>> > up databases as best I can.
>> >
>> > For pure political reasons, I must allow a non-IT person access to
>> > Enterprise Manager for a SQL 2005 database within their subnet.
>> > (Scary,
>> > to
>> > say the least.)  The main reason is that they want to be able to backup
>> > their
>> > own database whenever they see fit -- scheduling be damned!  The
>> > software
>> > vendor does not offer a backup within their own software; Enterprise
>> > Manager
>> > must be used -- with full admin privileges of the SQL Server!!!
>> >
>> > I want to be able to prevent the user from accessing any of the other
>> > SQL
>> > databases (2000 & 2005) within the domain.  Is this possible?  If so,
>> > how?
>> > Can someone point me in the right direction?
>> >
>> > I'd much prefer a script of some kind to allow the user to run a SQL
>> > backup
>> > of the database without invoking Enterprise Manager at all.  Is THIS
>> > possible?
>> >
>> > My sanity begs for help.  Thanks in advance to whomever can offer
>> > assistance
>> > with this issue.
>>
>>
>>
Author
17 May 2006 10:48 AM
Tibor Karaszi
You can download a redistribution of SQLCMD from
http://www.microsoft.com/downloads/details.aspx?FamilyID=df0ba5aa-b4bd-4705-aa0a-b477ba72a9cb&DisplayLang=en

Show quote
"BayCoMIS" <BayCo***@discussions.microsoft.com> wrote in message
news:3DCE1CE9-524E-4610-A60D-999E080A7CA0@microsoft.com...
> Geoff,
>
> Thanks for the scripting advice.  Unfortunately, I don't know much about
> SQLCMD scripting.  So, my next (obvoius) question would be:
>
> Is it possible to write a script that one could run from a workstation and
> NOT have SSMS installed on that workstation?   Can we Share out the
> directories in which the database and transaction logs are located
> (READ-ONLY, of course) and have a script run from the workstation so that we
> don't have to have SSMS installed for the user?
>
> Thanks again for your help.  I've been researching the SQLCMD and trying to
> get a grip on it.
>
>
> "Geoff N. Hiten" wrote:
>
>> First,  Enterprise Manager does not work with SQL 2005.  You have to use the
>> new SQL Server Management Studio.  SSMS does work with SQL 2000 and SQL
>> 2005.
>>
>> Second, why don't you write a short backup script using the SQLCMD utility
>> that he can invoke to create a backup, you do not have to start a backup
>> using a GUI.  Alternatively, with transaction log backups and FULL recovery,
>> he can recover to any point in time with the scheduled full restore as the
>> starting point.  Therefore he has no need to create random backups.
>>
>> --
>> Geoff N. Hiten
>> Senior Database Administrator
>> Microsoft SQL Server MVP
>>
>>
>>
>>
>> "BayCoMIS" <BayCo***@discussions.microsoft.com> wrote in message
>> news:80DC3B08-92DF-46C5-A697-9566F5159404@microsoft.com...
>> > Let me preface by saying that I'm not a DBA-type person.  I'm more of the
>> > network guy who truly hopes to have an honest-to-God DBA hired on within
>> > the
>> > next six months.  I'm the interim DBA without much DBA knowledge just
>> > backing
>> > up databases as best I can.
>> >
>> > For pure political reasons, I must allow a non-IT person access to
>> > Enterprise Manager for a SQL 2005 database within their subnet.  (Scary,
>> > to
>> > say the least.)  The main reason is that they want to be able to backup
>> > their
>> > own database whenever they see fit -- scheduling be damned!  The software
>> > vendor does not offer a backup within their own software; Enterprise
>> > Manager
>> > must be used -- with full admin privileges of the SQL Server!!!
>> >
>> > I want to be able to prevent the user from accessing any of the other SQL
>> > databases (2000 & 2005) within the domain.  Is this possible?  If so, how?
>> > Can someone point me in the right direction?
>> >
>> > I'd much prefer a script of some kind to allow the user to run a SQL
>> > backup
>> > of the database without invoking Enterprise Manager at all.  Is THIS
>> > possible?
>> >
>> > My sanity begs for help.  Thanks in advance to whomever can offer
>> > assistance
>> > with this issue.
>>
>>
>>
Author
17 May 2006 2:08 PM
BayCoMIS
Thanks for the link!  You're a mind-reader...  finding a redist of SQLCMD was
going to be my next question.

By the way, is there any tweak one can perform to gray out (remove) the
"Remember password" option when running SSMS?  We have to use SQL Server
Authentication, and I'd like to force the issue of requiring the user to log
on each time.

Thanks again for the link, Tibor.


Show quote
"Tibor Karaszi" wrote:

> You can download a redistribution of SQLCMD from
> http://www.microsoft.com/downloads/details.aspx?FamilyID=df0ba5aa-b4bd-4705-aa0a-b477ba72a9cb&DisplayLang=en
>
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
>
>
> "BayCoMIS" <BayCo***@discussions.microsoft.com> wrote in message
> news:3DCE1CE9-524E-4610-A60D-999E080A7CA0@microsoft.com...
> > Geoff,
> >
> > Thanks for the scripting advice.  Unfortunately, I don't know much about
> > SQLCMD scripting.  So, my next (obvoius) question would be:
> >
> > Is it possible to write a script that one could run from a workstation and
> > NOT have SSMS installed on that workstation?   Can we Share out the
> > directories in which the database and transaction logs are located
> > (READ-ONLY, of course) and have a script run from the workstation so that we
> > don't have to have SSMS installed for the user?
> >
> > Thanks again for your help.  I've been researching the SQLCMD and trying to
> > get a grip on it.
> >
> >
> > "Geoff N. Hiten" wrote:
> >
> >> First,  Enterprise Manager does not work with SQL 2005.  You have to use the
> >> new SQL Server Management Studio.  SSMS does work with SQL 2000 and SQL
> >> 2005.
> >>
> >> Second, why don't you write a short backup script using the SQLCMD utility
> >> that he can invoke to create a backup, you do not have to start a backup
> >> using a GUI.  Alternatively, with transaction log backups and FULL recovery,
> >> he can recover to any point in time with the scheduled full restore as the
> >> starting point.  Therefore he has no need to create random backups.
> >>
> >> --
> >> Geoff N. Hiten
> >> Senior Database Administrator
> >> Microsoft SQL Server MVP
> >>
> >>
> >>
> >>
> >> "BayCoMIS" <BayCo***@discussions.microsoft.com> wrote in message
> >> news:80DC3B08-92DF-46C5-A697-9566F5159404@microsoft.com...
> >> > Let me preface by saying that I'm not a DBA-type person.  I'm more of the
> >> > network guy who truly hopes to have an honest-to-God DBA hired on within
> >> > the
> >> > next six months.  I'm the interim DBA without much DBA knowledge just
> >> > backing
> >> > up databases as best I can.
> >> >
> >> > For pure political reasons, I must allow a non-IT person access to
> >> > Enterprise Manager for a SQL 2005 database within their subnet.  (Scary,
> >> > to
> >> > say the least.)  The main reason is that they want to be able to backup
> >> > their
> >> > own database whenever they see fit -- scheduling be damned!  The software
> >> > vendor does not offer a backup within their own software; Enterprise
> >> > Manager
> >> > must be used -- with full admin privileges of the SQL Server!!!
> >> >
> >> > I want to be able to prevent the user from accessing any of the other SQL
> >> > databases (2000 & 2005) within the domain.  Is this possible?  If so, how?
> >> > Can someone point me in the right direction?
> >> >
> >> > I'd much prefer a script of some kind to allow the user to run a SQL
> >> > backup
> >> > of the database without invoking Enterprise Manager at all.  Is THIS
> >> > possible?
> >> >
> >> > My sanity begs for help.  Thanks in advance to whomever can offer
> >> > assistance
> >> > with this issue.
> >>
> >>
> >>
>
>
>
Author
17 May 2006 3:09 PM
Tibor Karaszi
> Thanks for the link!

Glad it helped. :-)


> By the way, is there any tweak one can perform to gray out (remove) the
> "Remember password" option when running SSMS?

I really don't know. Wouldn't think so, but you might want to post this as a new thread with
appropriate subject as this question is now buried inside another thread... :-)
Show quote
"BayCoMIS" <BayCo***@discussions.microsoft.com> wrote in message
news:48648645-33C7-4EC8-B387-D8C6680AD193@microsoft.com...
> Thanks for the link!  You're a mind-reader...  finding a redist of SQLCMD was
> going to be my next question.
>
> By the way, is there any tweak one can perform to gray out (remove) the
> "Remember password" option when running SSMS?  We have to use SQL Server
> Authentication, and I'd like to force the issue of requiring the user to log
> on each time.
>
> Thanks again for the link, Tibor.
>
>
> "Tibor Karaszi" wrote:
>
>> You can download a redistribution of SQLCMD from
>> http://www.microsoft.com/downloads/details.aspx?FamilyID=df0ba5aa-b4bd-4705-aa0a-b477ba72a9cb&DisplayLang=en
>>
>> --
>> Tibor Karaszi, SQL Server MVP
>> http://www.karaszi.com/sqlserver/default.asp
>> http://www.solidqualitylearning.com/
>>
>>
>> "BayCoMIS" <BayCo***@discussions.microsoft.com> wrote in message
>> news:3DCE1CE9-524E-4610-A60D-999E080A7CA0@microsoft.com...
>> > Geoff,
>> >
>> > Thanks for the scripting advice.  Unfortunately, I don't know much about
>> > SQLCMD scripting.  So, my next (obvoius) question would be:
>> >
>> > Is it possible to write a script that one could run from a workstation and
>> > NOT have SSMS installed on that workstation?   Can we Share out the
>> > directories in which the database and transaction logs are located
>> > (READ-ONLY, of course) and have a script run from the workstation so that we
>> > don't have to have SSMS installed for the user?
>> >
>> > Thanks again for your help.  I've been researching the SQLCMD and trying to
>> > get a grip on it.
>> >
>> >
>> > "Geoff N. Hiten" wrote:
>> >
>> >> First,  Enterprise Manager does not work with SQL 2005.  You have to use the
>> >> new SQL Server Management Studio.  SSMS does work with SQL 2000 and SQL
>> >> 2005.
>> >>
>> >> Second, why don't you write a short backup script using the SQLCMD utility
>> >> that he can invoke to create a backup, you do not have to start a backup
>> >> using a GUI.  Alternatively, with transaction log backups and FULL recovery,
>> >> he can recover to any point in time with the scheduled full restore as the
>> >> starting point.  Therefore he has no need to create random backups.
>> >>
>> >> --
>> >> Geoff N. Hiten
>> >> Senior Database Administrator
>> >> Microsoft SQL Server MVP
>> >>
>> >>
>> >>
>> >>
>> >> "BayCoMIS" <BayCo***@discussions.microsoft.com> wrote in message
>> >> news:80DC3B08-92DF-46C5-A697-9566F5159404@microsoft.com...
>> >> > Let me preface by saying that I'm not a DBA-type person.  I'm more of the
>> >> > network guy who truly hopes to have an honest-to-God DBA hired on within
>> >> > the
>> >> > next six months.  I'm the interim DBA without much DBA knowledge just
>> >> > backing
>> >> > up databases as best I can.
>> >> >
>> >> > For pure political reasons, I must allow a non-IT person access to
>> >> > Enterprise Manager for a SQL 2005 database within their subnet.  (Scary,
>> >> > to
>> >> > say the least.)  The main reason is that they want to be able to backup
>> >> > their
>> >> > own database whenever they see fit -- scheduling be damned!  The software
>> >> > vendor does not offer a backup within their own software; Enterprise
>> >> > Manager
>> >> > must be used -- with full admin privileges of the SQL Server!!!
>> >> >
>> >> > I want to be able to prevent the user from accessing any of the other SQL
>> >> > databases (2000 & 2005) within the domain.  Is this possible?  If so, how?
>> >> > Can someone point me in the right direction?
>> >> >
>> >> > I'd much prefer a script of some kind to allow the user to run a SQL
>> >> > backup
>> >> > of the database without invoking Enterprise Manager at all.  Is THIS
>> >> > possible?
>> >> >
>> >> > My sanity begs for help.  Thanks in advance to whomever can offer
>> >> > assistance
>> >> > with this issue.
>> >>
>> >>
>> >>
>>
>>
>>
Author
9 May 2006 10:11 PM
Erland Sommarskog
BayCoMIS (BayCo***@discussions.microsoft.com) writes:
> For pure political reasons, I must allow a non-IT person access to
> Enterprise Manager for a SQL 2005 database within their subnet.  (Scary,
> to say the least.)  The main reason is that they want to be able to
> backup their own database whenever they see fit -- scheduling be damned!
>  The software vendor does not offer a backup within their own software;
> Enterprise Manager must be used -- with full admin privileges of the SQL
> Server!!!

To add to Geoff's respons: you don't need full admin rights to backup a
single database. It's sufficient to have db_owner rights on that
database.


--
Erland Sommarskog, SQL Server MVP, esq***@sommarskog.se

Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
Author
16 May 2006 8:47 PM
BayCoMIS
Thanks to you (and Geoff) for your responses.

As for your "db_owner" suggestion, that makes sense, but in all honesty,
that's more than I'd like to give them.  Would it be enough to grant rights
only to db_backupoperator?  Would that be sufficient enough to allow ONLY
backing up the database and transaction logs, or would additional rights be
necessary?

Thanks again for your help!

Show quote
"Erland Sommarskog" wrote:

> BayCoMIS (BayCo***@discussions.microsoft.com) writes:
> > For pure political reasons, I must allow a non-IT person access to
> > Enterprise Manager for a SQL 2005 database within their subnet.  (Scary,
> > to say the least.)  The main reason is that they want to be able to
> > backup their own database whenever they see fit -- scheduling be damned!
> >  The software vendor does not offer a backup within their own software;
> > Enterprise Manager must be used -- with full admin privileges of the SQL
> > Server!!!

> To add to Geoff's respons: you don't need full admin rights to backup a
> single database. It's sufficient to have db_owner rights on that
> database.
>
>
> --
> Erland Sommarskog, SQL Server MVP, esq***@sommarskog.se
>
> Books Online for SQL Server 2005 at
> http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
> Books Online for SQL Server 2000 at
> http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx
>
Author
20 May 2006 4:07 PM
Erland Sommarskog
BayCoMIS (BayCo***@discussions.microsoft.com) writes:
> As for your "db_owner" suggestion, that makes sense, but in all honesty,
> that's more than I'd like to give them.  Would it be enough to grant
> rights only to db_backupoperator?  Would that be sufficient enough to
> allow ONLY backing up the database and transaction logs, or would
> additional rights be necessary?

As I can read from Books Online, db_backupoperator would be sufficent.

Since you talked about "backup their database", I more or less assumed
that the persons in question already owned the database.

--
Erland Sommarskog, SQL Server MVP, esq***@sommarskog.se

Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/prodtechnol/sql/2005/downloads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodinfo/previousversions/books.mspx

AddThis Social Bookmark Button