How to use linked server securely?

background: sql2k on nt5.
Can someone tell me a secured way to set up a secured linked server?
In the past, I have been using sa account and its password to set up a
linked server, but a regular user with limited permissions on ServerA can
issue any commands to a linked ServerB as sa account, right?
Is there a way to limit the use of a linked server to a NT group with sql
admins role?
Thank you.You probably ought to read Books Online subject: "linked servers, security"
This is potentially a big subject that can't be effectively dealt with via
message boards...
"== Steve Pdx==" <lins@.nospam.portptld.com> wrote in message
news:ehtZt75NEHA.1396@.TK2MSFTNGP10.phx.gbl...
> background: sql2k on nt5.
>
> Can someone tell me a secured way to set up a secured linked server?
> In the past, I have been using sa account and its password to set up a
> linked server, but a regular user with limited permissions on ServerA can
> issue any commands to a linked ServerB as sa account, right?
>
> Is there a way to limit the use of a linked server to a NT group with sql
> admins role?
>
> Thank you.
>
>|||I have read that subject i BOL.
it doesn't make much sense to me.
If I were to have a NT group called sqladmins, and i assign Bob, Chris, and
Doug to that group.
I have 2 servers, ServerA and Server B. I want sqladmis to be able to query
ServerB (any database, such as sysobjects in master database) from ServerA,
but not for other users not belong to that group.
What should I do?
Pls help! Thank you
"Don Peterson" <no1@.nunya.com> wrote in message
news:eYOCHX6NEHA.3744@.TK2MSFTNGP11.phx.gbl...
> You probably ought to read Books Online subject: "linked servers,
security"
> This is potentially a big subject that can't be effectively dealt with via
> message boards...
> "== Steve Pdx==" <lins@.nospam.portptld.com> wrote in message
> news:ehtZt75NEHA.1396@.TK2MSFTNGP10.phx.gbl...
> > background: sql2k on nt5.
> >
> >
> >
> > Can someone tell me a secured way to set up a secured linked server?
> >
> > In the past, I have been using sa account and its password to set up a
> > linked server, but a regular user with limited permissions on ServerA
can
> > issue any commands to a linked ServerB as sa account, right?
> >
> >
> >
> > Is there a way to limit the use of a linked server to a NT group with
sql
> > admins role?
> >
> >
> >
> > Thank you.
> >
> >
> >
> >
>