Securing the Analysis Services Computer

As with any application, the most direct way to access the data in Microsoft SQL Server Analysis Services is through the physical computer on which the application is running. If an unauthorized individual obtains physical access to the computer on which Analysis Services is running, that individual can potentially access any data that is stored on that computer, regardless of any other security measures you use to help secure the data.

To increase the physical security of the computer on which Analysis Services is running, take the following steps:

• Make sure that only authorized individuals have physical access to the computer. Where it is possible, locate the computer in a locked room that has restricted access.

• Disable the floppy-based boot option, if the CMOS for the motherboard provides this option, and consider removing the floppy disk completely.

• Disable the CD-ROM—based boot option, if the CMOS for the motherboard provides this option.

• Help protect the computer by using a power-on password, and help protect the CMOS settings of the motherboard by using a CMOS-access password.

• Use a computer case that supports intrusion detection and that cannot be opened without a key; store the key in a safe location away from the computer.